Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2008-7276 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T20:22:37.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a directory under /tmp/ with 1274 permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations, related to incorrect interpretation of 0700 as a decimal value. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=3133 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2008-7277 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T17:49:07.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=3045 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2008-7278 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T17:04:10.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: The S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available for cryptographic operations, related to inability to write to the seeding file. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=2539 - http://bugs.otrs.org/show_bug.cgi?id=2844 -
rogram Container: References: - http://bugs.otrs.org/show_bug.cgi?id=2539 - http://bugs.otrs.org/show_bug.cgi?id=2844 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2008-7279 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-17T01:20:37.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to bypass intended access restrictions and access tickets of arbitrary customers via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=3103 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2008-7280 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T21:56:46.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2.7 does not properly handle e-mail messages containing malformed UTF-8 characters, which allows remote attackers to cause a denial of service (e-mail retrieval outage) via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=2934 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2008-7281 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T18:29:52.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that lists the Blind Carbon Copy recipients, which allows remote attackers to obtain potentially sensitive e-mail address information by reading this field. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=2814 - http://bugs.otrs.org/show_bug.cgi?id=1882 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2008-7282 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T20:27:21.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System (OTRS) before 2.2.6, when the CustomerPanelOwnSelection and CustomerGroupSupport options are enabled, allows remote authenticated users to bypass intended access restrictions, and perform certain (1) list and (2) write operations on queues, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=2696 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2008-7283 State: PUBLISHED Published: 2011-03-18T16:00:00Z Last Updated: 2024-09-16T21:03:22.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows remote authenticated users to bypass intended access restrictions and perform web-interface updates to tickets by leveraging queue read permissions. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.otrs.org/show_bug.cgi?id=2544 - http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807
CVE ID: CVE-2008-7284 State: PUBLISHED Published: 2011-03-22T17:00:00Z Last Updated: 2024-09-17T00:01:38.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Quickr 8.1 before 8100.003 services for Lotus Domino allows remote authenticated users to cause a denial of service (daemon crash) by clicking a download link, aka SPR QCAO7E6AM8. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27013341
CVE ID: CVE-2008-7285 State: PUBLISHED Published: 2011-03-22T17:00:00Z Last Updated: 2024-09-17T03:48:42.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the docnote string handling implementation in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allows remote attackers to cause a denial of service (daemon crash) via unknown vectors, aka SPR JFLD7GZT25. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27013341
CVE ID: CVE-2008-7286 State: PUBLISHED Published: 2011-03-22T17:00:00Z Last Updated: 2024-09-17T00:15:46.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino does not properly handle URLs that request images, which allows remote authenticated users to cause a denial of service (daemon crash) via a request to resources.nsf, aka SPR XFXF7JDBCX. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg27013341
CVE ID: CVE-2008-7287 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-16T18:03:22.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in the (1) ldap_init and (2) ldap_url_search_direct API functions in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allow remote authenticated users to cause a denial of service (memory consumption) by making many function calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IO09650 - http://www.ibm.com/support/docview.wss?uid=swg24029663
CVE ID: CVE-2008-7288 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-17T01:17:02.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service (server destabilization) via an anonymous DIGEST-MD5 LDAP Bind operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IO09666 - http://www.ibm.com/support/docview.wss?uid=swg2402966
CVE ID: CVE-2008-7289 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-16T18:33:46.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 does not properly handle the simultaneous changing of multiple passwords, which makes it easier for remote authenticated users to cause a denial of service (DB2 daemon deadlock) by making password changes that trigger updates to a DB2 password-history table. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IO09667 - http://www.ibm.com/support/docview.wss?uid=swg24029663
CVE ID: CVE-2008-7290 State: PUBLISHED Published: 2011-04-21T10:00:00Z Last Updated: 2024-09-16T17:59:50.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the ldap_explode_rdn API function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allows remote authenticated users to cause a denial of service (memory consumption) by making many function calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg1IO09680 - http://www.ibm.com/support/docview.wss?uid=swg24029663
CVE ID: CVE-2008-7291 State: PUBLISHED Published: 2019-11-07T23:51:32 Last Updated: 2024-08-07T12:03:36.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: gri before 2.12.18 generates temporary files in an insecure way. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2008-7291
CVE ID: CVE-2008-7292 State: PUBLISHED Published: 2011-08-09T19:00:00Z Last Updated: 2024-09-17T00:11:16.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=414002 - https://bugzilla.mozilla.org/show_bug.cgi?id=660502
CVE ID: CVE-2008-7293 State: PUBLISHED Published: 2011-08-09T19:00:00Z Last Updated: 2024-09-16T20:42:02.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 4 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue. Additional Analyst Notes: - CVE Program Container: References: - http://hacks.mozilla.org/2010/08/firefox-4-http-strict-transport-security-force-https/ - http://michael-coates.blog
s: - http://hacks.mozilla.org/2010/08/firefox-4-http-strict-transport-security-force-https/ - http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html - http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies - http://scarybeastsecurity.blogspot.com/2011/02/some-less-obvious-benefits-of-hsts.html - https://bugzilla.mozilla.org/show_bug.cgi?id=660053 - http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
CVE ID: CVE-2008-7294 State: PUBLISHED Published: 2011-08-09T19:00:00Z Last Updated: 2024-09-17T01:46:02.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue. Additional Analyst Notes: - CVE Program Container: References: - http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html - http://code.google.com
erences: - http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html - http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies - http://scarybeastsecurity.blogspot.com/2011/02/some-less-obvious-benefits-of-hsts.html - https://bugzilla.mozilla.org/show_bug.cgi?id=660053 - http://lists.w3.org/Archives/Public/public-webapps/2009JulSep/1148.html - http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
CVE ID: CVE-2008-7295 State: PUBLISHED Published: 2011-08-09T19:00:00Z Last Updated: 2024-09-17T02:32:46.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue. Additional Analyst Notes: - CVE Program Container: References: - http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html - http://code.google.com/p/
nces: - http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html - http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies - http://scarybeastsecurity.blogspot.com/2011/02/some-less-obvious-benefits-of-hsts.html - https://bugzilla.mozilla.org/show_bug.cgi?id=660053 - http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
CVE ID: CVE-2008-7296 State: PUBLISHED Published: 2011-08-09T19:00:00Z Last Updated: 2024-09-17T03:43:15.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue. Additional Analyst Notes: - CVE Program Container: References: - http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html - http://code.google.com/p/browsersec/wiki
michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html - http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies - http://scarybeastsecurity.blogspot.com/2011/02/some-less-obvious-benefits-of-hsts.html - https://bugzilla.mozilla.org/show_bug.cgi?id=660053 - http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
CVE ID: CVE-2008-7297 State: PUBLISHED Published: 2011-08-09T19:00:00Z Last Updated: 2024-09-17T04:10:05.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue. Additional Analyst Notes: - CVE Program Container: References: - http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html - http://code.google.com/p/browsersec/wiki/Part2#
-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html - http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies - http://scarybeastsecurity.blogspot.com/2011/02/some-less-obvious-benefits-of-hsts.html - https://bugzilla.mozilla.org/show_bug.cgi?id=660053 - http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
CVE ID: CVE-2008-7298 State: PUBLISHED Published: 2011-08-09T19:00:00Z Last Updated: 2024-09-16T17:22:38.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Android browser in Android cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue. Additional Analyst Notes: - CVE Program Container: References: - http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html - http://code.google.com
erences: - http://michael-coates.blogspot.com/2010/01/cookie-forcing-trust-your-cookies-no.html - http://code.google.com/p/browsersec/wiki/Part2#Same-origin_policy_for_cookies - http://scarybeastsecurity.blogspot.com/2011/02/some-less-obvious-benefits-of-hsts.html - https://bugzilla.mozilla.org/show_bug.cgi?id=660053 - http://scarybeastsecurity.blogspot.com/2008/11/cookie-forcing.html
CVE ID: CVE-2008-7299 State: PUBLISHED Published: 2011-08-12T17:00:00Z Last Updated: 2024-09-16T22:50:46.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2 uses an incomplete SAML 1.x browser-artifact, which allows remote OpenID providers to spoof assertions via vectors related to the Issuer field. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IZ35742 - http://www.ibm.com/support/docview.wss?uid=swg24029497
CVE ID: CVE-2008-7300 State: PUBLISHED Published: 2011-10-05T01:00:00Z Last Updated: 2024-09-16T19:05:40.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_39 through snv_67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control (MAC) policy and obtain access to the global zone. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30602 - http://secunia.com/advisories/31412 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-240099-1
CVE ID: CVE-2008-7301 State: PUBLISHED Published: 2011-10-05T01:00:00 Last Updated: 2024-08-07T12:03:36.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43747
CVE ID: CVE-2008-7302 State: PUBLISHED Published: 2011-10-05T01:00:00Z Last Updated: 2024-09-17T02:02:36.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in netinvoice.php in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving "knowledge of ... the contents of an encrypted file." Additional Analyst Notes: - CVE Program Container: References: - http://www.nbill.co.uk/newsflash/important-security-announcement.html - http://www.nbill.co.uk/forum-smf/index.php/topic%2C716.0.html
CVE ID: CVE-2008-7303 State: PUBLISHED Published: 2011-11-15T18:00:00Z Last Updated: 2024-09-16T23:35:43.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script file, a related issue to CVE-2011-1516. Additional Analyst Notes: - CVE Program Container: References: - http://www.coresecurity.com/content/apple-osx-sandbox-bypass - https://www.blackhat.com/presentations/bh-jp-08/bh-jp-08-Miller/B
ww.coresecurity.com/content/apple-osx-sandbox-bypass - https://www.blackhat.com/presentations/bh-jp-08/bh-jp-08-Miller/BlackHat-Japan-08-Miller-Hacking-OSX.pdf
CVE ID: CVE-2008-7304 State: REJECTED Published: 2020-11-05T19:57:51 Last Updated: 2020-11-05T19:57:51 Description: No description available.
CVE ID: CVE-2008-7305 State: REJECTED Published: 2020-11-05T19:58:11 Last Updated: 2020-11-05T19:58:11 Description: No description available.
CVE ID: CVE-2008-7306 State: REJECTED Published: 2020-11-05T19:58:43 Last Updated: 2020-11-05T19:58:43 Description: No description available.
CVE ID: CVE-2008-7307 State: REJECTED Published: 2020-11-05T19:59:03 Last Updated: 2020-11-05T19:59:03 Description: No description available.
CVE ID: CVE-2008-7308 State: REJECTED Published: 2020-11-05T19:59:24 Last Updated: 2020-11-05T19:59:24 Description: No description available.
CVE ID: CVE-2008-7309 State: PUBLISHED Published: 2012-04-04T22:00:00Z Last Updated: 2024-09-16T19:05:17.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the ForumPost user_id value via a modified URL, related to a "mass assignment" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://railspikes.com/2008/9/22/is-your-rails-application-safe-from-mass-assignment - http://blog.mhartl.com/2008/09/21/finding-and-fixing-mass-assignment-problems-in-rails-applications/
CVE ID: CVE-2008-7310 State: PUBLISHED Published: 2012-04-04T22:00:00Z Last Updated: 2024-09-16T23:30:34.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spree 0.2.0 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the Order state value and bypass the intended payment step via a modified URL, related to a "mass assignment" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://spreecommerce.com/blog/2008/09/16/security-vulnerability-mass-assignment-of-order-params/ - http://railspikes.com/2008/9/22/is-your-rails-application-safe-from-mass-assignment
CVE ID: CVE-2008-7311 State: PUBLISHED Published: 2012-04-04T22:00:00Z Last Updated: 2024-09-17T00:06:53.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session cookie store implementation in Spree 0.2.0 uses a hardcoded config.action_controller_session hash value (aka secret key), which makes it easier for remote attackers to bypass cryptographic protection mechanisms by leveraging an application that contains this value within the config/environment.rb file. Additional Analyst Notes: - CVE Program Container: References: - http://support.spreehq.org/issues/show/63 - http://spreecommerce.com/blog/2008/08/12/security-vulernability-session-cookie-store/
CVE ID: CVE-2008-7312 State: PUBLISHED Published: 2012-08-23T10:00:00 Last Updated: 2024-08-07T12:03:36.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it easier for remote attackers to bypass filtering via an HTTP request, as demonstrated by a request to a compromised server associated with a specific IP address. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/78299 - http://www.websense.com/support/article/t-kbarticle/Why-doesn-t-my-Websense-installation-categorize-URLs-and-
es/78299 - http://www.websense.com/support/article/t-kbarticle/Why-doesn-t-my-Websense-installation-categorize-URLs-and-Permit-Block-in-accordance-with-the-Site-Lookup-Tool-s-categorization