CVE-2002-0706

Published: Oct 10, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.

Affected (4)

Products: Surfcontrol: Superscout Web Filter, Web Filter

Surfcontrol

2 products

Superscout Web Filter

Web Filter

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Surfcontrol Superscout Web Filter	Version 3.0.3
Surfcontrol Superscout Web Filter	Version 3.0
Surfcontrol Web Filter	Version 4.0
Surfcontrol Web Filter	Version 4.1