CVE-2002-0706

UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:surfcontrol:superscout_web_filter:3.0:*:*:*:*:*:*:*
cpe:2.3:a:surfcontrol:superscout_web_filter:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:surfcontrol:web_filter:4.0:*:*:*:*:*:*:*
cpe:2.3:a:surfcontrol:web_filter:4.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2002-10-10 04:00

Updated : 2024-02-04 16:31


NVD link : CVE-2002-0706

Mitre link : CVE-2002-0706

CVE.ORG link : CVE-2002-0706


JSON object : View

Products Affected

surfcontrol

  • web_filter
  • superscout_web_filter