Lucene search

[email protected]CVE-2010-5146

HistoryAug 23, 2012 - 10:32 a.m.

CVE-2010-5146

2012-08-2310:32:14

CWE-264

[email protected]

web.nvd.nist.gov

websense

web security

web filter

remote filtering

cve-2010-5146

local users

bypass filtering

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The Remote Filtering component in Websense Web Security and Web Filter before 7.1 Hotfix 66 allows local users to bypass filtering by (1) renaming the WDC.exe file or (2) deleting driver files.

Affected configurations

NVD

Node

websensewebsense_web_securityRange≤7.1

websensewebsense_web_securityMatch6.3.0

websensewebsense_web_securityMatch6.3.1

websensewebsense_web_securityMatch6.3.2

websensewebsense_web_securityMatch6.3.3

websensewebsense_web_securityMatch7.0

Node

websensewebsense_web_filterRange≤7.1

websensewebsense_web_filterMatch6.3.0

websensewebsense_web_filterMatch6.3.1

websensewebsense_web_filterMatch6.3.2

websensewebsense_web_filterMatch6.3.3

websensewebsense_web_filterMatch7.0

CPENameOperatorVersion
websense:websense_web_securitywebsense websense web securityle7.1
websense:websense_web_securitywebsense websense web securityeq6.3.0
websense:websense_web_securitywebsense websense web securityeq6.3.1
websense:websense_web_securitywebsense websense web securityeq6.3.2
websense:websense_web_securitywebsense websense web securityeq6.3.3
websense:websense_web_securitywebsense websense web securityeq7.0

CPE	Name	Operator	Version
websense:websense_web_security	websense websense web security	le	7.1
websense:websense_web_security	websense websense web security	eq	6.3.0
websense:websense_web_security	websense websense web security	eq	6.3.1
websense:websense_web_security	websense websense web security	eq	6.3.2
websense:websense_web_security	websense websense web security	eq	6.3.3
websense:websense_web_security	websense websense web security	eq	7.0

References

www.websense.com/content/support/library/web/v711/ws711_known_issues/first.aspx

www.websense.com/content/support/library/web/v711/ws711_known_issues/ws711_known_issues.pdf

exchange.xforce.ibmcloud.com/vulnerabilities/78344

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2010-5146

prion1 cvelist1 nvd1