Lucene search
HistoryOct 22, 2008 - 12:11 a.m.
CVE-2008-4646
websense
reporter module
websense enterprise
cve-2008-4646
sql database
plaintext
local users
database privileges
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database.
Affected configurations
Node
websenseenterpiseMatch6.3.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| websense:enterpise | websense enterpise | eq | 6.3.2 |
Related
cvelist
cvelist
CVE-2008-4646
2008-10-21 22:00:00
prion
prion
Design/Logic Flaw
2008-10-22 00:11:00
nvd
nvd
CVE-2008-4646
2008-10-22 00:11:50
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2008-4646