CVE-2009-5122: Infoleak
The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive information from the JBoss status page via an unspecified query.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-5122?
CVE-2009-5122 has a medium severity level, as it allows attackers to access potentially sensitive information.
How do I fix CVE-2009-5122?
To fix CVE-2009-5122, you should upgrade Websense Email Security to version 7.2 or later.
What components are affected by CVE-2009-5122?
CVE-2009-5122 affects the Personal Email Manager component in Websense Email Security versions 6.1, 6.1-sp1, and 7.0.
What type of attack is possible with CVE-2009-5122?
CVE-2009-5122 allows remote attackers to obtain sensitive information via an unspecified query to the JBoss status page.
Is CVE-2009-5122 still a risk for unsupported software versions?
Yes, CVE-2009-5122 remains a risk for any instances of Websense Email Security below version 7.2 that are still in use.