CVEvulnerability
CVE-2008-4646
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2008-10-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database.
Affected configurations
• websense enterpise 6.3.2
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/32264 Vendor Advisory
- http://www.securityfocus.com/bid/31746 www.securityfocus.com
- http://www.securitytracker.com/id?1021058 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2819 www.vupen.com
- http://www.zebux.org/pub/Advisory/Advisory_Websense_Reporter_Password_Disclosure_200810.txt www.zebux.org
- http://secunia.com/advisories/32264 Vendor Advisory
- http://www.securityfocus.com/bid/31746 www.securityfocus.com
- http://www.securitytracker.com/id?1021058 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2819 www.vupen.com
- http://www.zebux.org/pub/Advisory/Advisory_Websense_Reporter_Password_Disclosure_200810.txt www.zebux.org