CVE-2014-0347
Low
Description
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to read cleartext passwords by replacing type="password" with type="text" in an INPUT element in the (1) Log Database or (2) User Directories component.
SeverityLow
CVSS3.5
Exploit probability—
ProductWebsense Triton Unified Security Center
PublishedApr 12, 2014
First seenApr 12, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| websense triton_unified_security_center | 7.7.3 | — |
| websense triton_web_filter | 7.7.3 | — |
| websense triton_web_security | 7.7.3 | — |
| websense triton_web_security_gateway | 7.7.3 | — |
| websense triton_web_security_gateway_anywhere | 7.7.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.