Vulnerability in Websense
CVE-2010-5144
The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an HTTP Via header.
EPSS: 0.015 (71.4th percentile) — read the EPSS interpretation.
Affected products
- Websense — versions 6.3.0, 6.3.1
- Websense Websense_web_filter — versions 6.3.0, 6.3.1
- Websense Websense_web_security — versions 6.3.0, 6.3.1, 6.3.3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (Exploit, x_refsource_MISC)