CVE-2010-5148

Published: Aug 23, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session (SSL) cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

Affected (2)

Products: Websense: Websense Web Filter, Websense Web Security

2 products

Websense Web Filter

Websense Web Security

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Websense Websense Web Filter	Up to 7.0
Websense Websense Web Security	Up to 7.0

References (6)

http://www.websense.com/content/support/library/web/v711/ws711_known_issues/first.aspx

Source: cve@mitre.org

Vendor Advisory

http://www.websense.com/content/support/library/web/v711/ws711_known_issues/ws711_known_issues.pdf

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78342

Source: cve@mitre.org

http://www.websense.com/content/support/library/web/v711/ws711_known_issues/first.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.websense.com/content/support/library/web/v711/ws711_known_issues/ws711_known_issues.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78342

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.