NVD

Id
29244  
Name
CVE-2014-0347  
Description
The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to read cleartext passwords by replacing type="password" with type="text" in an INPUT element in the (1) Log Database or (2) User Directories component.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-04-12  
Modified Date
2014-04-14  
Seq
2014-0347  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
154923 29244 CVE-2014-0347 VU#568252  View
154924 29244 CVE-2014-0347 https://www.websense.com/content/mywebsense-hotfixes.aspx?patchid=894&prodidx=20&osidx=0&intidx=0&versionidx=0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13044 JVNDB-2014-001919 Websense TRITON Unified Security Center に情報漏えいの脆弱性 Websense が提供する TRITON Unified Security Center には、情報漏えいの脆弱性が存在します。 CVE-2014-0347 67748 CVE-2014-0347 29244 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001919.html 2014-04-07 2014-04-15 View