Test ID:	1.3.6.1.4.1.25623.1.0.106003
Category:	Web application abuses
Title:	Websense Triton File Disclosure Vulnerability
Summary:	Websense Triton is vulnerable to a file disclosure;vulnerability.
Description:	Summary: Websense Triton is vulnerable to a file disclosure vulnerability. Vulnerability Insight: The Apache server of Websense Data Security has mapped the explorer_wse path to a folder used by Websense for storing generated reports. No access control is enforced on this folder. Files stored in the folder are accessible to unauthenticated user. Vulnerability Impact: An attacker can abuse this issue to download any file exposed by this path, including security reports and Websense Explorer configuration files. Affected Software/OS: Websense Triton v7.8.3 and v7.7 Solution: Update to version 8.0 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2748 Bugtraq: 20150318 Missing access control on Websense Explorer web folder (Google Search) http://www.securityfocus.com/archive/1/534913/100/0/threaded http://seclists.org/fulldisclosure/2015/Mar/107 http://packetstormsecurity.com/files/130901/Websense-Explorer-Missing-Access-Control.html https://www.securify.nl/advisory/SFY20140909/missing_access_control_on_websense_explorer_web_folder.html
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.