CVE-2008-4646

Description

The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database.

References

http://www.zebux.org/pub/Advisory/Advisory_Websense_Reporter_Password_Disclosure_200810.txt

http://www.vupen.com/english/advisories/2008/2819

http://www.securitytracker.com/id?1021058

http://www.securityfocus.com/bid/31746

http://secunia.com/advisories/32264

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS