CVEvulnerability
CVE-2005-4514
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case. NOTE: the vendor has stated that this problem could not be reproduced, and has asked the researcher for more information, without a response as of 20060103
Affected configurations
• webwasher csm appliance suite 5.0
References
- http://securityreason.com/securityalert/293 securityreason.com
- http://www.securityfocus.com/archive/1/420106/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/420158/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/420678/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16047 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23884 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/293 securityreason.com
- http://www.securityfocus.com/archive/1/420106/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/420158/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/420678/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16047 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23884 exchange.xforce.ibmcloud.com