CVE-2008-4646: Low severity websense enterprise vulnerability
The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4646?
CVE-2008-4646 has been classified as having a moderate severity due to potential local privilege escalation risks.
How do I fix CVE-2008-4646?
To fix CVE-2008-4646, ensure that the CreateDbInstall.log file is secured and not accessible to unauthorized local users.
What type of vulnerability is CVE-2008-4646?
CVE-2008-4646 is a security vulnerability involving plaintext storage of sensitive information, specifically the SQL database system administrator password.
What systems are affected by CVE-2008-4646?
CVE-2008-4646 affects Websense Enterprise version 6.3.2.
Who can exploit CVE-2008-4646?
Local users who have access to the affected system can exploit CVE-2008-4646 to gain unauthorized privileges to the database.