CVE-2011-5102 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

The Investigative Reports web interface in the TRITON management console in Websense Web Security 7.1 before Hotfix 109, 7.1.1 before Hotfix 06, 7.5 before Hotfix 78, 7.5.1 before Hotfix 12, 7.6 before Hotfix 24, and 7.6.2 before Hotfix 12; Web Filter; Web Security Gateway; and Web Security Gateway Anywhere allows remote attackers to execute commands via unspecified vectors.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Websense	Websense Web Filter	All versions
Websense	Websense Web Security	7.1
Websense	Websense Web Security Gateway	All versions
Websense	Websense Web Security Gateway Anywhere	All versions

Related Weaknesses (CWE)

CWE-264

References

http://www.websense.com/support/article/kbarticle/v7-1-1-About-Hotfix-06-for-WebVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-1-About-Hotfix-109-for-WebsVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-5-1-About-Hotfix-12-for-WebVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-5-About-Hotfix-78-for-WebseVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-6-2-About-Hotfix-12-for-WebVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-6-2-About-Hotfix-12-for-WebVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-6-About-Hotfix-24-for-WebseVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-6-About-Hotfix-24-for-WebseVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-1-1-About-Hotfix-06-for-WebVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-1-About-Hotfix-109-for-WebsVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-5-1-About-Hotfix-12-for-WebVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-5-About-Hotfix-78-for-WebseVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-6-2-About-Hotfix-12-for-WebVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-6-2-About-Hotfix-12-for-WebVendor Advisory
http://www.websense.com/support/article/kbarticle/v7-6-About-Hotfix-24-for-WebseVendor Advisory

FAQ

What is CVE-2011-5102?

CVE-2011-5102 is a vulnerability with a CVSS score of 7.5 (HIGH). The Investigative Reports web interface in the TRITON management console in Websense Web Security 7.1 before Hotfix 109, 7.1.1 before Hotfix 06, 7.5 before Hotfix 78, 7.5.1 before Hotfix 12, 7.6 befor...

How severe is CVE-2011-5102?

CVE-2011-5102 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2011-5102?

Check the references section above for vendor advisories and patch information. Affected products include: Websense Websense Web Filter, Websense Websense Web Security, Websense Websense Web Security Gateway, Websense Websense Web Security Gateway Anywhere.