Websense TRITON AP-EMAIL CVE-2015-2765 Unspecified Clickjacking Vulnerability
BID:73427
Info
Websense TRITON AP-EMAIL CVE-2015-2765 Unspecified Clickjacking Vulnerability
| Bugtraq ID: | 73427 |
| Class: | Design Error |
| CVE: |
CVE-2015-2765 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 27 2015 12:00AM |
| Updated: | Mar 27 2015 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Websense TRITON AP-EMAIL 7.8.3 |
| Not Vulnerable: |
Websense TRITON AP-EMAIL 8.0 |
Discussion
Websense TRITON AP-EMAIL CVE-2015-2765 Unspecified Clickjacking Vulnerability
Websense TRITON AP-EMAIL is prone to an unspecified clickjacking vulnerability because it fails to perform validity checks on certain user actions through HTTP requests.
Successful exploits will allow an attacker to compromise the affected application or obtain sensitive information. Other attacks are also possible.
Websense TRITON AP-EMAIL is prone to an unspecified clickjacking vulnerability because it fails to perform validity checks on certain user actions through HTTP requests.
Successful exploits will allow an attacker to compromise the affected application or obtain sensitive information. Other attacks are also possible.
Exploit / POC
Websense TRITON AP-EMAIL CVE-2015-2765 Unspecified Clickjacking Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user to visit a crafted webpage.
An attacker can exploit this issue by enticing an unsuspecting user to visit a crafted webpage.
Solution / Fix
Websense TRITON AP-EMAIL CVE-2015-2765 Unspecified Clickjacking Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Websense TRITON AP-EMAIL CVE-2015-2765 Unspecified Clickjacking Vulnerability
References:
References:
- Vulnerabilities resolved in TRITON APX Version 8.0 (Websense)
- Websense Homepage (Websense)