Signature Detail
Short Name |
APP:WEBSENSE-FAV-BYPASS |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Multiple Websense Products favorites.exe Authentication Bypass HTTP |
Release Date |
2012/05/08 |
Update Number |
2132 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Multiple Websense Products 'favorites.exe' Authentication Bypass
This signature detects attempts to exploit a known security-bypass vulnerability against multiple Websense products. A successful exploit may allow attackers unauthorized access to a victim's system where they could download, view, or manipulate files.
Extended Description
Multiple Websense products are prone to an authentication-bypass vulnerability. Remote attackers can exploit this issue to bypass the authentication mechanism and gain unauthorized access. The following Websense products are affected: Websense Web Security Gateway Anywhere 7.6 Websense Web Security Gateway 7.6 Websense Web Security 7.6 Websense Web Filter 7.6
Affected Products
- Websense Web Security 7.6
- Websense Web Security Gateway 7.6
- Websense Web Security Gateway Anywhere 7.6
References