CVE-2009-5119

Name of the Vulnerable Software and Affected Versions Websense Web Security versions 7.0 Websense Web Filter versions 7.0

Description The default configuration of Apache Tomcat in Websense Manager enables weak SSL ciphers in conf/server.xml. This makes it easier for remote attackers to obtain sensitive information by sniffing the network and then conducting a brute-force attack against encrypted session data.

Recommendations For Websense Web Security version 7.0, update the configuration to disable weak SSL ciphers in conf/server.xml. For Websense Web Filter version 7.0, update the configuration to disable weak SSL ciphers in conf/server.xml.