CVE-2009-5122

The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive information from the JBoss status page via an unspecified query.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.websense.com/content/support/library/email/v72wes/release_notes/WES72_ReleaseNotes.pdf	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/78449

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:websense:websense_email_security::::::::
	cpe:2.3:a:websense:websense_email_security:6.1:::::::*
	cpe:2.3:a:websense:websense_email_security:6.1:sp1::::::
	cpe:2.3:a:websense:websense_email_security:7.0:::::::*

History

No history.

Information

Published : 2012-08-23 10:32

Updated : 2024-02-04 18:16

NVD link : CVE-2009-5122

Mitre link : CVE-2009-5122

CVE.ORG link : CVE-2009-5122

JSON object : View

Products Affected

websense

websense_email_security

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2009-5122", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-08-23T10:32:14.437", "references": [{"url": "http://www.websense.com/content/support/library/email/v72wes/release_notes/WES72_ReleaseNotes.pdf", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78449", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive information from the JBoss status page via an unspecified query."}, {"lang": "es", "value": "El componente Personal Email Manager en Websense Email Security anterior a v7.2 permite a atacantes remotos obtener informaci\u00f3n sensible de la p\u00e1gina de estado de JBoss a trav\u00e9s de una consulta sin especificar."}], "lastModified": "2017-08-29T01:29:03.207", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:websense:websense_email_security:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF768C45-659C-4AFA-82C6-151118813862", "versionEndIncluding": "7.1"}, {"criteria": "cpe:2.3:a:websense:websense_email_security:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B57542A-390F-4447-BD4A-CDD758D715D6"}, {"criteria": "cpe:2.3:a:websense:websense_email_security:6.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9949AE6C-A57E-4B37-831E-DB4C462F5FB4"}, {"criteria": "cpe:2.3:a:websense:websense_email_security:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "806E0AAE-B313-4F37-9C9A-13CA9CEE57D7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}