CVE-2012-4604

Name of the Vulnerable Software and Affected Versions Websense Web Security versions prior to 7.6 Hotfix 24

Description The issue allows remote attackers to bypass authentication and read arbitrary reports by crafting specific fields in a cookie, including the uid field and the userRoles field, as demonstrated by a request to "explorer wse/favorites.exe".

Recommendations For Websense Web Security versions prior to 7.6 Hotfix 24, apply Hotfix 24 to resolve the issue.