Multiple Websense Products 'CommandLineServlet' Servlet Command Injection Vulnerability

Bugtraq ID:	73233
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Mar 18 2015 12:00AM
Updated:	Mar 18 2015 12:00AM
Credit:	Securify B.V
Vulnerable:
Not Vulnerable:

Multiple Websense Products 'CommandLineServlet' Servlet Command Injection Vulnerability

Multiple Websense products are prone to a command-injection vulnerability.

Attackers can exploit this issue to execute arbitrary commands within the context of the affected system.

Multiple Websense Products 'CommandLineServlet' Servlet Command Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Websense Products 'CommandLineServlet' Servlet Command Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Websense Products 'CommandLineServlet' Servlet Command Injection Vulnerability

References:

• Websense Product Page (Websense)
  
• Command injection vulnerability in network diagnostics tool of Websense Applianc (Websense)