CVE-2015-2748
EUVD-2015-283826.03.2015, 14:59
Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorer_wse/, which allows remote attackers to obtain sensitive information via a direct request to a (1) Web Security incident report or the (2) Explorer configuration (websense.ini) file.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| websense | triton_ap_data | 𝑥 ≤ 7.8.3 |
| websense | triton_ap_email | 𝑥 ≤ 7.8.3 |
| websense | triton_ap_web | 𝑥 ≤ 7.8.3 |
| websense | v-series_appliances | 𝑥 ≤ 7.7 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration