Multiple Websense Products CVE-2015-2771 Plaintext Credentials Information Disclosure Vulnerability

Bugtraq ID:	73428
Class:	Design Error
CVE:	CVE-2015-2771
Remote:	Yes
Local:	No
Published:	Mar 27 2015 12:00AM
Updated:	Mar 27 2015 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Websense TRITON V-Series 7.0 Websense TRITON AP-EMAIL 7.8.3
Not Vulnerable:	Websense TRITON V-Series 8.0 Websense TRITON AP-EMAIL 8.0

Multiple Websense Products CVE-2015-2771 Plaintext Credentials Information Disclosure Vulnerability

Multiple Websense Products are prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.

Multiple Websense Products CVE-2015-2771 Plaintext Credentials Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Websense Products CVE-2015-2771 Plaintext Credentials Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Websense Products CVE-2015-2771 Plaintext Credentials Information Disclosure Vulnerability

References:

• Vulnerabilities resolved in TRITON APX Version 8.0 (Websense)
  
• Websense Homepage (Websense)
  
• Websense Product Page (Websense)