CVE-2002-0706 UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password usi...
HighCVSS 7.5
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| surfcontrol superscout web filter | = 3.0 | No fix listed |
| surfcontrol superscout web filter | = 3.0.3 | No fix listed |
| surfcontrol web filter | = 4.0 | No fix listed |
| surfcontrol web filter | = 4.1 | No fix listed |