CVE-2014-0347: Low severity Websense Triton Unified Security Center vulnerability

Published Apr 12, 2014

Updated

The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to read cleartext passwords by replacing type="password" with type="text" in an INPUT element in the (1) Log Database or (2) User Directories component.

Affected Software

5 affected components

Websense Triton Unified Security Center=7.7.3

Websense Triton Web Filter=7.7.3

Websense Triton Web Security=7.7.3

Websense Triton Web Security Gateway=7.7.3

Websense Triton Web Security Gateway Anywhere=7.7.3

Event History

Apr 12, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·04:37 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0347?

CVE-2014-0347 is rated as a medium severity vulnerability.

How do I fix CVE-2014-0347?

To fix CVE-2014-0347, apply Hotfix 31 for the affected Websense Triton products.

What products are affected by CVE-2014-0347?

CVE-2014-0347 affects Websense Triton Unified Security Center 7.7.3, Web Filter 7.7.3, Web Security 7.7.3, Web Security Gateway 7.7.3, and Web Security Gateway Anywhere 7.7.3.

Can CVE-2014-0347 be exploited remotely?

Yes, CVE-2014-0347 can be exploited by remote authenticated users.

What type of attack does CVE-2014-0347 enable?

CVE-2014-0347 may allow remote authenticated users to manipulate settings or configurations within the affected products.