CVE-2010-5148: Medium severity Websense Websense Web Security vulnerability
Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session (SSL) cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-5148?
CVE-2010-5148 is considered a medium severity vulnerability due to the potential for cookie interception.
How can I mitigate CVE-2010-5148?
To mitigate CVE-2010-5148, upgrade to Websense Web Security and Web Filter version 7.1 Hotfix 21 or later.
What software is affected by CVE-2010-5148?
CVE-2010-5148 affects Websense Web Security versions prior to 7.1 Hotfix 21 and Websense Web Filter versions prior to 7.1 Hotfix 21.
What type of vulnerability is CVE-2010-5148?
CVE-2010-5148 is a cookie security vulnerability that allows for remote cookie interception.
Is CVE-2010-5148 exploitable remotely?
Yes, CVE-2010-5148 is remotely exploitable if appropriate network conditions are met.