CVEvulnerability

CVE-2010-5144

4.3 MEDIUM Published 2012-08-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-08-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-264

Description

The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction with a Microsoft ISA or Microsoft Forefront TMG server, allows remote attackers to bypass intended filtering and monitoring activities for web traffic via an HTTP Via header.

Affected configurations

• websense websense (<= 6.3.3) • websense websense 6.3.0 • websense websense 6.3.1 • websense websense web security 6.3.0 • websense websense web security 6.3.1 • websense websense web security 6.3.3 • websense websense web filter (<= 6.3.3) • websense websense web filter 6.3.0 • websense websense web filter 6.3.1

Related

Weakness · not in database (1)

References