CVE-2008-7312
CVSS V2 Medium 5
CVSS V3 None
Description
The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it easier for remote attackers to bypass filtering via an HTTP request, as demonstrated by a request to a compromised server associated with a specific IP address.
Overview
- CVE ID
- CVE-2008-7312
- Assigner
- cve@mitre.org
- Vulnerability Status
- Modified
- Published Version
- 2012-08-23T10:32:14
- Last Modified Date
- 2017-08-29T01:29:01
Weakness Enumerations
CPE Configuration (Product)
CPE | Vulnerable | Operator | Version Start | Version End |
---|---|---|---|---|
cpe:2.3:a:websense:enterprise:5.2:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:websense:enterprise:5.5:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:websense:enterprise:6.1:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:websense:enterprise:6.2:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:websense:enterprise:6.3:*:*:*:*:*:*:* | 1 | OR |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:N/AC:L/Au:N/C:N/I:P/A:N
- Access Vector
- NETWORK
- Access Compatibility
- LOW
- Authentication
- NONE
- Confidentiality Impact
- NONE
- Integrity Impact
- PARTIAL
- Availability Impact
- NONE
- Base Score
- 5
- Severity
- MEDIUM
- Exploitability Score
- 10
- Impact Score
- 2.9
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2008-7312 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7312 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2022-05-10 08:53:48 | Added to TrackCVE |