CVE-2005-4514 - The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detectio

CVE-2005-4514

Summary

The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case. NOTE: the vendor has stated that this problem could not be reproduced, and has asked the researcher for more information, without a response as of 20060103

References

Vulnerable Configurations

cpe:2.3:a:webwasher:csm_appliance_suite:5.0:*:*:*:*:*:*:*
cpe:2.3:a:webwasher:csm_appliance_suite:5.0:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 11-04-2024 - 00:39)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:P/A:N

refmap via4

bid	16047
bugtraq	20051222 Webwasher CSM Appliance Script Security Restriction Bypass 20051223 RE: Webwasher CSM Appliance Script Security Restriction Bypass 20060103 RE: Webwasher CSM Appliance Script Security Restriction Bypass
sreason	293
xf	webwasher-security-bypass(23884)

Last major update

11-04-2024 - 00:39

Published

23-12-2005 - 01:03

Last modified

11-04-2024 - 00:39