PT-2012-1284
CVE-2009-5119
·
تاريخ النشر
2012-08-23
·
تاريخ التحديث
2012-08-23
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Websense Web Security versions 7.0
Websense Web Filter versions 7.0
Description
The default configuration of Apache Tomcat in Websense Manager enables weak SSL ciphers in conf/server.xml. This makes it easier for remote attackers to obtain sensitive information by sniffing the network and then conducting a brute-force attack against encrypted session data.
Recommendations
For Websense Web Security version 7.0, update the configuration to disable weak SSL ciphers in conf/server.xml.
For Websense Web Filter version 7.0, update the configuration to disable weak SSL ciphers in conf/server.xml.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾