Information disclosure in Websense Email Security

CVE-2009-5122

The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive information from the JBoss status page via an unspecified query.

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.

Affected products

Websense Websense_email_security — versions 6.1, 7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)