CVE-2012-4605

Published: Aug 23, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\SuperScout Email Filter\SMTP" registry key, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then conducting a brute-force attack against encrypted session data.

Affected (5)

Products: Websense: Websense Email Security

Websense

1 product

Websense Email Security

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Websense Websense Email Security	Version 6.1
Websense Websense Email Security	Version 6.1 sp1
Websense Websense Email Security	Version 7.0
Websense Websense Email Security	Version 7.1
Websense Websense Email Security	Version 7.2