CVEvulnerability
CVE-2009-5122
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive information from the JBoss status page via an unspecified query.
Affected configurations
• websense websense email security (<= 7.1)
• websense websense email security 6.1
• websense websense email security 7.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.websense.com/content/support/library/email/v72wes/release_notes/WES72_ReleaseNotes.pdf Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78449 exchange.xforce.ibmcloud.com
- http://www.websense.com/content/support/library/email/v72wes/release_notes/WES72_ReleaseNotes.pdf Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78449 exchange.xforce.ibmcloud.com