CVE-2010-5144 The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allo...
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an HTTP Via header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| websense | <= 6.3.3 | No fix listed |
| websense | = 6.3.0 | No fix listed |
| websense | = 6.3.1 | No fix listed |
| websense web security | = 6.3.0 | No fix listed |
| websense web security | = 6.3.1 | No fix listed |
| websense web security | = 6.3.3 | No fix listed |
| websense web filter | <= 6.3.3 | No fix listed |
| websense web filter | = 6.3.0 | No fix listed |
| websense web filter | = 6.3.1 | No fix listed |
References
- 20100529 Websense Enterprise 6.3.3 Policy Bypass exploit mailing-list
- mrhinkydink.blogspot.com exploit
- www.websense.com vendor-advisory