CVE

Id
57848  
CVE No.
CVE-2012-4605  
Status
Candidate  
Description
The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plcSuperScout Email FilterSMTP" registry key, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then conducting a brute-force attack against encrypted session data.  
Phase
Assigned (20120823)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
596325 57848 CVE-2012-4605 CONFIRM:http://www.websense.com/support/article/kbarticle/SSL-TLS-weak-and-export-ciphers-detected-in-Websense-Email-Security-deployments  View
596326 57848 CVE-2012-4605 BID:64758  View
596327 57848 CVE-2012-4605 URL:http://www.securityfocus.com/bid/64758  View
596328 57848 CVE-2012-4605 XF:websense-smtp-info-disc(78131)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29462 JVNDB-2012-005169 EMC Avamar Client for VMware における重要な情報を取得される脆弱性 EMC Avamar Client for VMware は、サーバルートパスワードを平文でプロキシクライアント上に保存するため、重要な情報を取得される脆弱性が存在します。 CVE-2012-4610 57848 3.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005169.html  View