Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
15 vulnerabilities by armorlogic
VAR-200902-0031
Vulnerability from variot - Updated: 2023-12-18 13:25Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action. Profense is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. An attacker can exploit the cross-site request forgery issue to alter the settings on affected devices. This may lead to further network-based attacks. Other attacks are also possible. Profense 2.6.2 is vulnerable; other versions may also be affected. Profense Web Application Firewal is a website firewall. ----------------------------------------------------------------------
Did you know that a change in our assessment rating, exploit code availability, or if an updated patch is released by the vendor, is not part of this mailing-list?
Click here to learn more: http://secunia.com/advisories/business_solutions/
TITLE: Profense Web Application Firewall Cross-Site Scripting and Cross-Site Request Forgery
SECUNIA ADVISORY ID: SA33739
VERIFY ADVISORY: http://secunia.com/advisories/33739/
CRITICAL: Less critical
IMPACT: Cross Site Scripting
WHERE:
From remote
SOFTWARE: Profense Web Application Firewall 2.x http://secunia.com/advisories/product/21280/
DESCRIPTION: Michael Brooks has discovered some vulnerabilities in Profense Web Application Firewall, which can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks.
1) Input passed via the "proxy" parameter in proxy.html is not properly sanitised before being returned to the user.
2) The application allows users to perform certain actions via HTTP requests without performing any validity check to verify the request. This can be exploited to perform certain actions, e.g. to shutdown the system, by enticing a logged-in administrator to visit a malicious web site.
The vulnerability is reported in version 2.6.2 and confirmed in version 2.6.3.
SOLUTION: Do not follow untrusted links and do not visit untrusted web sites while being logged-in to the web-based management interface.
PROVIDED AND/OR DISCOVERED BY: Michael Brooks
ORIGINAL ADVISORY: http://milw0rm.com/exploits/7919
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200902-0031",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 1.6,
"vendor": "armorlogic",
"version": "2.6.3"
},
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 1.6,
"vendor": "armorlogic",
"version": "2.6.2"
},
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 0.8,
"vendor": "armorlogic",
"version": "2.6.2 and 2.6.3"
},
{
"model": "profense",
"scope": "eq",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.6.2"
},
{
"model": "profense",
"scope": "ne",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.6.4"
}
],
"sources": [
{
"db": "BID",
"id": "33523"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003237"
},
{
"db": "NVD",
"id": "CVE-2009-0467"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-234"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2009-0467"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Michael Brooks",
"sources": [
{
"db": "BID",
"id": "33523"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-234"
}
],
"trust": 0.9
},
"cve": "CVE-2009-0467",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2009-0467",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "VHN-37913",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2009-0467",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-200902-234",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-37913",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-37913"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003237"
},
{
"db": "NVD",
"id": "CVE-2009-0467"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-234"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action. Profense is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. \nAn attacker can exploit the cross-site request forgery issue to alter the settings on affected devices. This may lead to further network-based attacks. Other attacks are also possible. \nProfense 2.6.2 is vulnerable; other versions may also be affected. Profense Web Application Firewal is a website firewall. ----------------------------------------------------------------------\n\nDid you know that a change in our assessment rating, exploit code\navailability, or if an updated patch is released by the vendor, is\nnot part of this mailing-list?\n\nClick here to learn more:\nhttp://secunia.com/advisories/business_solutions/\n\n----------------------------------------------------------------------\n\nTITLE:\nProfense Web Application Firewall Cross-Site Scripting and Cross-Site\nRequest Forgery\n\nSECUNIA ADVISORY ID:\nSA33739\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/33739/\n\nCRITICAL:\nLess critical\n\nIMPACT:\nCross Site Scripting\n\nWHERE:\n\u003eFrom remote\n\nSOFTWARE:\nProfense Web Application Firewall 2.x\nhttp://secunia.com/advisories/product/21280/\n\nDESCRIPTION:\nMichael Brooks has discovered some vulnerabilities in Profense Web\nApplication Firewall, which can be exploited by malicious people to\nconduct cross-site scripting and cross-site request forgery attacks. \n\n1) Input passed via the \"proxy\" parameter in proxy.html is not\nproperly sanitised before being returned to the user. \n\n2) The application allows users to perform certain actions via HTTP\nrequests without performing any validity check to verify the request. \nThis can be exploited to perform certain actions, e.g. to shutdown the\nsystem, by enticing a logged-in administrator to visit a malicious web\nsite. \n\nThe vulnerability is reported in version 2.6.2 and confirmed in\nversion 2.6.3. \n\nSOLUTION:\nDo not follow untrusted links and do not visit untrusted web sites\nwhile being logged-in to the web-based management interface. \n\nPROVIDED AND/OR DISCOVERED BY:\nMichael Brooks\n\nORIGINAL ADVISORY:\nhttp://milw0rm.com/exploits/7919\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2009-0467"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003237"
},
{
"db": "BID",
"id": "33523"
},
{
"db": "VULHUB",
"id": "VHN-37913"
},
{
"db": "PACKETSTORM",
"id": "74477"
}
],
"trust": 2.07
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-37913",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-37913"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2009-0467",
"trust": 2.5
},
{
"db": "BID",
"id": "33523",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "33739",
"trust": 1.9
},
{
"db": "EXPLOIT-DB",
"id": "7919",
"trust": 1.8
},
{
"db": "OSVDB",
"id": "51659",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003237",
"trust": 0.8
},
{
"db": "MILW0RM",
"id": "7919",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200902-234",
"trust": 0.6
},
{
"db": "SEEBUG",
"id": "SSVID-66247",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-37913",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "74477",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-37913"
},
{
"db": "BID",
"id": "33523"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003237"
},
{
"db": "PACKETSTORM",
"id": "74477"
},
{
"db": "NVD",
"id": "CVE-2009-0467"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-234"
}
]
},
"id": "VAR-200902-0031",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-37913"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T13:25:30.189000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.armorlogic.com/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-003237"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-79",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-37913"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003237"
},
{
"db": "NVD",
"id": "CVE-2009-0467"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/33523"
},
{
"trust": 1.7,
"url": "http://osvdb.org/51659"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/33739"
},
{
"trust": 1.1,
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0467"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-0467"
},
{
"trust": 0.6,
"url": "http://www.milw0rm.com/exploits/7919"
},
{
"trust": 0.3,
"url": "http://www.armorlogic.com/index.html"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/33739/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/business_solutions/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://milw0rm.com/exploits/7919"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/product/21280/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-37913"
},
{
"db": "BID",
"id": "33523"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003237"
},
{
"db": "PACKETSTORM",
"id": "74477"
},
{
"db": "NVD",
"id": "CVE-2009-0467"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-234"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-37913"
},
{
"db": "BID",
"id": "33523"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003237"
},
{
"db": "PACKETSTORM",
"id": "74477"
},
{
"db": "NVD",
"id": "CVE-2009-0467"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-234"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-02-10T00:00:00",
"db": "VULHUB",
"id": "VHN-37913"
},
{
"date": "2009-01-29T00:00:00",
"db": "BID",
"id": "33523"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-003237"
},
{
"date": "2009-01-30T11:11:49",
"db": "PACKETSTORM",
"id": "74477"
},
{
"date": "2009-02-10T07:00:24.670000",
"db": "NVD",
"id": "CVE-2009-0467"
},
{
"date": "2009-02-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200902-234"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-09-29T00:00:00",
"db": "VULHUB",
"id": "VHN-37913"
},
{
"date": "2009-02-18T22:17:00",
"db": "BID",
"id": "33523"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-003237"
},
{
"date": "2017-09-29T01:33:49.950000",
"db": "NVD",
"id": "CVE-2009-0467"
},
{
"date": "2009-02-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200902-234"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200902-234"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Profense Web Application Firewall of proxy.html Vulnerable to cross-site scripting",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-003237"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "XSS",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200902-234"
}
],
"trust": 0.6
}
}
VAR-200902-0032
Vulnerability from variot - Updated: 2023-12-18 13:25Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string. Profense is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. An attacker can exploit the cross-site request forgery issue to alter the settings on affected devices. This may lead to further network-based attacks. The attacker can exploit the cross-site scripting issue to execute arbitrary script code in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials. Other attacks are also possible. Profense 2.6.2 is vulnerable; other versions may also be affected. ----------------------------------------------------------------------
Did you know that a change in our assessment rating, exploit code availability, or if an updated patch is released by the vendor, is not part of this mailing-list?
Click here to learn more: http://secunia.com/advisories/business_solutions/
TITLE: Profense Web Application Firewall Cross-Site Scripting and Cross-Site Request Forgery
SECUNIA ADVISORY ID: SA33739
VERIFY ADVISORY: http://secunia.com/advisories/33739/
CRITICAL: Less critical
IMPACT: Cross Site Scripting
WHERE:
From remote
SOFTWARE: Profense Web Application Firewall 2.x http://secunia.com/advisories/product/21280/
DESCRIPTION: Michael Brooks has discovered some vulnerabilities in Profense Web Application Firewall, which can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks.
1) Input passed via the "proxy" parameter in proxy.html is not properly sanitised before being returned to the user.
2) The application allows users to perform certain actions via HTTP requests without performing any validity check to verify the request. This can be exploited to perform certain actions, e.g. to shutdown the system, by enticing a logged-in administrator to visit a malicious web site.
The vulnerability is reported in version 2.6.2 and confirmed in version 2.6.3.
SOLUTION: Do not follow untrusted links and do not visit untrusted web sites while being logged-in to the web-based management interface.
PROVIDED AND/OR DISCOVERED BY: Michael Brooks
ORIGINAL ADVISORY: http://milw0rm.com/exploits/7919
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200902-0032",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 1.6,
"vendor": "armorlogic",
"version": "2.6.3"
},
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 1.6,
"vendor": "armorlogic",
"version": "2.6.2"
},
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 0.8,
"vendor": "armorlogic",
"version": "2.6.2 and 2.6.3"
},
{
"model": "profense",
"scope": "eq",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.6.2"
},
{
"model": "profense",
"scope": "ne",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.6.4"
}
],
"sources": [
{
"db": "BID",
"id": "33523"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003238"
},
{
"db": "NVD",
"id": "CVE-2009-0468"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-235"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.6.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2009-0468"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Michael Brooks",
"sources": [
{
"db": "BID",
"id": "33523"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-235"
}
],
"trust": 0.9
},
"cve": "CVE-2009-0468",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": true,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 6.8,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2009-0468",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-37914",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2009-0468",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-200902-235",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-37914",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-37914"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003238"
},
{
"db": "NVD",
"id": "CVE-2009-0468"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-235"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string. Profense is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. \nAn attacker can exploit the cross-site request forgery issue to alter the settings on affected devices. This may lead to further network-based attacks. \nThe attacker can exploit the cross-site scripting issue to execute arbitrary script code in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials. Other attacks are also possible. \nProfense 2.6.2 is vulnerable; other versions may also be affected. ----------------------------------------------------------------------\n\nDid you know that a change in our assessment rating, exploit code\navailability, or if an updated patch is released by the vendor, is\nnot part of this mailing-list?\n\nClick here to learn more:\nhttp://secunia.com/advisories/business_solutions/\n\n----------------------------------------------------------------------\n\nTITLE:\nProfense Web Application Firewall Cross-Site Scripting and Cross-Site\nRequest Forgery\n\nSECUNIA ADVISORY ID:\nSA33739\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/33739/\n\nCRITICAL:\nLess critical\n\nIMPACT:\nCross Site Scripting\n\nWHERE:\n\u003eFrom remote\n\nSOFTWARE:\nProfense Web Application Firewall 2.x\nhttp://secunia.com/advisories/product/21280/\n\nDESCRIPTION:\nMichael Brooks has discovered some vulnerabilities in Profense Web\nApplication Firewall, which can be exploited by malicious people to\nconduct cross-site scripting and cross-site request forgery attacks. \n\n1) Input passed via the \"proxy\" parameter in proxy.html is not\nproperly sanitised before being returned to the user. \n\n2) The application allows users to perform certain actions via HTTP\nrequests without performing any validity check to verify the request. \nThis can be exploited to perform certain actions, e.g. to shutdown the\nsystem, by enticing a logged-in administrator to visit a malicious web\nsite. \n\nThe vulnerability is reported in version 2.6.2 and confirmed in\nversion 2.6.3. \n\nSOLUTION:\nDo not follow untrusted links and do not visit untrusted web sites\nwhile being logged-in to the web-based management interface. \n\nPROVIDED AND/OR DISCOVERED BY:\nMichael Brooks\n\nORIGINAL ADVISORY:\nhttp://milw0rm.com/exploits/7919\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2009-0468"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003238"
},
{
"db": "BID",
"id": "33523"
},
{
"db": "VULHUB",
"id": "VHN-37914"
},
{
"db": "PACKETSTORM",
"id": "74477"
}
],
"trust": 2.07
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-37914",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-37914"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2009-0468",
"trust": 2.5
},
{
"db": "BID",
"id": "33523",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "33739",
"trust": 1.9
},
{
"db": "EXPLOIT-DB",
"id": "7919",
"trust": 1.8
},
{
"db": "OSVDB",
"id": "51660",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003238",
"trust": 0.8
},
{
"db": "MILW0RM",
"id": "7919",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200902-235",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-37914",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "74477",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-37914"
},
{
"db": "BID",
"id": "33523"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003238"
},
{
"db": "PACKETSTORM",
"id": "74477"
},
{
"db": "NVD",
"id": "CVE-2009-0468"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-235"
}
]
},
"id": "VAR-200902-0032",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-37914"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T13:25:29.672000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.armorlogic.com/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-003238"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-352",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-37914"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003238"
},
{
"db": "NVD",
"id": "CVE-2009-0468"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/33523"
},
{
"trust": 1.7,
"url": "http://osvdb.org/51660"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/33739"
},
{
"trust": 1.1,
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-0468"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-0468"
},
{
"trust": 0.6,
"url": "http://www.milw0rm.com/exploits/7919"
},
{
"trust": 0.3,
"url": "http://www.armorlogic.com/index.html"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/33739/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/business_solutions/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://milw0rm.com/exploits/7919"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/product/21280/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-37914"
},
{
"db": "BID",
"id": "33523"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003238"
},
{
"db": "PACKETSTORM",
"id": "74477"
},
{
"db": "NVD",
"id": "CVE-2009-0468"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-235"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-37914"
},
{
"db": "BID",
"id": "33523"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003238"
},
{
"db": "PACKETSTORM",
"id": "74477"
},
{
"db": "NVD",
"id": "CVE-2009-0468"
},
{
"db": "CNNVD",
"id": "CNNVD-200902-235"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-02-10T00:00:00",
"db": "VULHUB",
"id": "VHN-37914"
},
{
"date": "2009-01-29T00:00:00",
"db": "BID",
"id": "33523"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-003238"
},
{
"date": "2009-01-30T11:11:49",
"db": "PACKETSTORM",
"id": "74477"
},
{
"date": "2009-02-10T07:00:24.767000",
"db": "NVD",
"id": "CVE-2009-0468"
},
{
"date": "2009-02-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200902-235"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-09-29T00:00:00",
"db": "VULHUB",
"id": "VHN-37914"
},
{
"date": "2009-02-18T22:17:00",
"db": "BID",
"id": "33523"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-003238"
},
{
"date": "2017-09-29T01:33:50.013000",
"db": "NVD",
"id": "CVE-2009-0468"
},
{
"date": "2009-04-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200902-235"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200902-235"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Profense Web Application Firewall of ajax.html Vulnerable to cross-site request forgery",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-003238"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "cross-site request forgery",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200902-235"
}
],
"trust": 0.6
}
}
VAR-200905-0318
Vulnerability from variot - Updated: 2023-12-18 12:11Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access. Profense Web Application Firewall is prone to a remote security vulnerability
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200905-0318",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 1.9,
"vendor": "armorlogic",
"version": "2.4"
},
{
"model": "profense web application firewall",
"scope": "lte",
"trust": 1.0,
"vendor": "armorlogic",
"version": "2.2.21"
},
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 0.9,
"vendor": "armorlogic",
"version": "2.2.21"
},
{
"model": "profense web application firewall",
"scope": "lt",
"trust": 0.8,
"vendor": "armorlogic",
"version": "2.2.22"
}
],
"sources": [
{
"db": "BID",
"id": "79481"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003434"
},
{
"db": "NVD",
"id": "CVE-2009-1745"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-265"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:armorlogic:profense_web_application_firewall:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.2.21",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2009-1745"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Unknown",
"sources": [
{
"db": "BID",
"id": "79481"
}
],
"trust": 0.3
},
"cve": "CVE-2009-1745",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 10.0,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "CVE-2009-1745",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-39191",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2009-1745",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-200905-265",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-39191",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39191"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003434"
},
{
"db": "NVD",
"id": "CVE-2009-1745"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-265"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access. Profense Web Application Firewall is prone to a remote security vulnerability",
"sources": [
{
"db": "NVD",
"id": "CVE-2009-1745"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003434"
},
{
"db": "BID",
"id": "79481"
},
{
"db": "VULHUB",
"id": "VHN-39191"
}
],
"trust": 1.98
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2009-1745",
"trust": 2.8
},
{
"db": "XF",
"id": "50852",
"trust": 0.9
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003434",
"trust": 0.8
},
{
"db": "BUGTRAQ",
"id": "20090520 ARMORLOGIC PROFENSE WEB APPLICATION FIREWALL 2.4 MULTIPLE VULNERABILITIES.",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200905-265",
"trust": 0.6
},
{
"db": "BID",
"id": "79481",
"trust": 0.4
},
{
"db": "VULHUB",
"id": "VHN-39191",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39191"
},
{
"db": "BID",
"id": "79481"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003434"
},
{
"db": "NVD",
"id": "CVE-2009-1745"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-265"
}
]
},
"id": "VAR-200905-0318",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-39191"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T12:11:38.163000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.armorlogic.com/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-003434"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-255",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39191"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003434"
},
{
"db": "NVD",
"id": "CVE-2009-1745"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"trust": 1.1,
"url": "http://resources.enablesecurity.com/advisories/es-20090500-profense.txt"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50852"
},
{
"trust": 0.9,
"url": "http://xforce.iss.net/xforce/xfdb/50852"
},
{
"trust": 0.9,
"url": "http://www.securityfocus.com/archive/1/archive/1/503649/100/0/threaded"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1745"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-1745"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39191"
},
{
"db": "BID",
"id": "79481"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003434"
},
{
"db": "NVD",
"id": "CVE-2009-1745"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-265"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-39191"
},
{
"db": "BID",
"id": "79481"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003434"
},
{
"db": "NVD",
"id": "CVE-2009-1745"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-265"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-05-21T00:00:00",
"db": "VULHUB",
"id": "VHN-39191"
},
{
"date": "2009-05-21T00:00:00",
"db": "BID",
"id": "79481"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-003434"
},
{
"date": "2009-05-21T15:30:01.563000",
"db": "NVD",
"id": "CVE-2009-1745"
},
{
"date": "2009-05-21T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200905-265"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-10T00:00:00",
"db": "VULHUB",
"id": "VHN-39191"
},
{
"date": "2009-05-21T00:00:00",
"db": "BID",
"id": "79481"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-003434"
},
{
"date": "2018-10-10T19:38:14.770000",
"db": "NVD",
"id": "CVE-2009-1745"
},
{
"date": "2009-06-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200905-265"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200905-265"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Armorlogic Profense Web Application Firewall Vulnerabilities that gain access",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-003434"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "trust management",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200905-265"
}
],
"trust": 0.6
}
}
VAR-200905-0167
Vulnerability from variot - Updated: 2023-12-18 12:11Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element. Profense Web Application Firewall is prone to multiple security-bypass vulnerabilities. An attacker can exploit these issues to bypass certain security restrictions and perform various web-application attacks. Versions prior to the following are vulnerable: Profense 2.4.4 Profense 2.2.22. 0A (encoded newline) bypasses XSS protection mechanisms and executes arbitrary code within the user's browser session
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200905-0167",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 1.6,
"vendor": "armorlogic",
"version": "2.4"
},
{
"model": "profense web application firewall",
"scope": "lte",
"trust": 1.0,
"vendor": "armorlogic",
"version": "2.2.21"
},
{
"model": "profense web application firewall",
"scope": "lt",
"trust": 0.8,
"vendor": "armorlogic",
"version": "2.2.22"
},
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 0.6,
"vendor": "armorlogic",
"version": "2.2.21"
},
{
"model": "profense",
"scope": "eq",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.4.2"
},
{
"model": "profense",
"scope": "eq",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.2.20"
},
{
"model": "profense",
"scope": "ne",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.4.4"
},
{
"model": "profense",
"scope": "ne",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.2.22"
}
],
"sources": [
{
"db": "BID",
"id": "35053"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003399"
},
{
"db": "NVD",
"id": "CVE-2009-1593"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-261"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:armorlogic:profense_web_application_firewall:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.2.21",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2009-1593"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sandro GauciWendel Guglielmetti Henrique",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200905-261"
}
],
"trust": 0.6
},
"cve": "CVE-2009-1593",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2009-1593",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "VHN-39039",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2009-1593",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-200905-261",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-39039",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39039"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003399"
},
{
"db": "NVD",
"id": "CVE-2009-1593"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-261"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"negative model,\" which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element. Profense Web Application Firewall is prone to multiple security-bypass vulnerabilities. \nAn attacker can exploit these issues to bypass certain security restrictions and perform various web-application attacks. \nVersions *prior to* the following are vulnerable:\nProfense 2.4.4\nProfense 2.2.22. 0A (encoded newline) bypasses XSS protection mechanisms and executes arbitrary code within the user\u0027s browser session",
"sources": [
{
"db": "NVD",
"id": "CVE-2009-1593"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003399"
},
{
"db": "BID",
"id": "35053"
},
{
"db": "VULHUB",
"id": "VHN-39039"
}
],
"trust": 1.98
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-39039",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39039"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2009-1593",
"trust": 2.8
},
{
"db": "BID",
"id": "35053",
"trust": 2.0
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003399",
"trust": 0.8
},
{
"db": "MLIST",
"id": "[WEBSECURITY] 20090519 [WEB SECURITY] TRUSTWAVE\u0027S SPIDERLABS SECURITY ADVISORY TWSL2009-001 AND ENABLESECURITY ADVISORY ES-20090500",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20090520 ARMORLOGIC PROFENSE WEB APPLICATION FIREWALL 2.4 MULTIPLE VULNERABILITIES.",
"trust": 0.6
},
{
"db": "XF",
"id": "50663",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200905-261",
"trust": 0.6
},
{
"db": "SEEBUG",
"id": "SSVID-86259",
"trust": 0.1
},
{
"db": "EXPLOIT-DB",
"id": "33002",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-39039",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39039"
},
{
"db": "BID",
"id": "35053"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003399"
},
{
"db": "NVD",
"id": "CVE-2009-1593"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-261"
}
]
},
"id": "VAR-200905-0167",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-39039"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T12:11:38.134000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.armorlogic.com/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-003399"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-79",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39039"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003399"
},
{
"db": "NVD",
"id": "CVE-2009-1593"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/35053"
},
{
"trust": 1.7,
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"trust": 1.1,
"url": "http://resources.enablesecurity.com/advisories/es-20090500-profense.txt"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50663"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1593"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-1593"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/50663"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/503649/100/0/threaded"
},
{
"trust": 0.3,
"url": "http://www.armorlogic.com/index.html"
},
{
"trust": 0.3,
"url": "/archive/1/503649"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39039"
},
{
"db": "BID",
"id": "35053"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003399"
},
{
"db": "NVD",
"id": "CVE-2009-1593"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-261"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-39039"
},
{
"db": "BID",
"id": "35053"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003399"
},
{
"db": "NVD",
"id": "CVE-2009-1593"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-261"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-05-21T00:00:00",
"db": "VULHUB",
"id": "VHN-39039"
},
{
"date": "2009-05-20T00:00:00",
"db": "BID",
"id": "35053"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-003399"
},
{
"date": "2009-05-21T14:30:00.437000",
"db": "NVD",
"id": "CVE-2009-1593"
},
{
"date": "2009-05-21T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200905-261"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-10T00:00:00",
"db": "VULHUB",
"id": "VHN-39039"
},
{
"date": "2009-05-21T20:50:00",
"db": "BID",
"id": "35053"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-003399"
},
{
"date": "2018-10-10T19:37:28.470000",
"db": "NVD",
"id": "CVE-2009-1593"
},
{
"date": "2009-05-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200905-261"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200905-261"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Armorlogic Profense Web Application Firewall Cross-site scripting attacks (XSS) Vulnerability to be executed",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-003399"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "XSS",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200905-261"
}
],
"trust": 0.6
}
}
VAR-200905-0168
Vulnerability from variot - Updated: 2023-12-18 12:11Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "positive model," which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL. Profense Web Application Firewall is prone to multiple security-bypass vulnerabilities. An attacker can exploit these issues to bypass certain security restrictions and perform various web-application attacks. Versions prior to the following are vulnerable: Profense 2.4.4 Profense 2.2.22. Remote attackers can include modified SCRIPT element end tags or % in URL requests
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200905-0168",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 1.6,
"vendor": "armorlogic",
"version": "2.4"
},
{
"model": "profense web application firewall",
"scope": "lte",
"trust": 1.0,
"vendor": "armorlogic",
"version": "2.2.21"
},
{
"model": "profense web application firewall",
"scope": "lt",
"trust": 0.8,
"vendor": "armorlogic",
"version": "2.2.22"
},
{
"model": "profense web application firewall",
"scope": "eq",
"trust": 0.6,
"vendor": "armorlogic",
"version": "2.2.21"
},
{
"model": "profense",
"scope": "eq",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.4.2"
},
{
"model": "profense",
"scope": "eq",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.2.20"
},
{
"model": "profense",
"scope": "ne",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.4.4"
},
{
"model": "profense",
"scope": "ne",
"trust": 0.3,
"vendor": "armorlogic",
"version": "2.2.22"
}
],
"sources": [
{
"db": "BID",
"id": "35053"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003400"
},
{
"db": "NVD",
"id": "CVE-2009-1594"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-262"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:armorlogic:profense_web_application_firewall:2.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:armorlogic:profense_web_application_firewall:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.2.21",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2009-1594"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sandro GauciWendel Guglielmetti Henrique",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200905-262"
}
],
"trust": 0.6
},
"cve": "CVE-2009-1594",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2009-1594",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-39040",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2009-1594",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-200905-262",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-39040",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39040"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003400"
},
{
"db": "NVD",
"id": "CVE-2009-1594"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-262"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"positive model,\" which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL. Profense Web Application Firewall is prone to multiple security-bypass vulnerabilities. \nAn attacker can exploit these issues to bypass certain security restrictions and perform various web-application attacks. \nVersions *prior to* the following are vulnerable:\nProfense 2.4.4\nProfense 2.2.22. Remote attackers can include modified SCRIPT element end tags or % in URL requests",
"sources": [
{
"db": "NVD",
"id": "CVE-2009-1594"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003400"
},
{
"db": "BID",
"id": "35053"
},
{
"db": "VULHUB",
"id": "VHN-39040"
}
],
"trust": 1.98
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2009-1594",
"trust": 2.8
},
{
"db": "BID",
"id": "35053",
"trust": 2.0
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003400",
"trust": 0.8
},
{
"db": "MLIST",
"id": "[WEBSECURITY] 20090519 [WEB SECURITY] TRUSTWAVE\u0027S SPIDERLABS SECURITY ADVISORY TWSL2009-001 AND ENABLESECURITY ADVISORY ES-20090500",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20090520 ARMORLOGIC PROFENSE WEB APPLICATION FIREWALL 2.4 MULTIPLE VULNERABILITIES.",
"trust": 0.6
},
{
"db": "XF",
"id": "50662",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200905-262",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-39040",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39040"
},
{
"db": "BID",
"id": "35053"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003400"
},
{
"db": "NVD",
"id": "CVE-2009-1594"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-262"
}
]
},
"id": "VAR-200905-0168",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-39040"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T12:11:38.104000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.armorlogic.com/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-003400"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-264",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39040"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003400"
},
{
"db": "NVD",
"id": "CVE-2009-1594"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/35053"
},
{
"trust": 1.7,
"url": "http://resources.enablesecurity.com/advisories/es-20090500-profense.txt"
},
{
"trust": 1.7,
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50662"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2009-1594"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2009-1594"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/50662"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/503649/100/0/threaded"
},
{
"trust": 0.3,
"url": "http://www.armorlogic.com/index.html"
},
{
"trust": 0.3,
"url": "/archive/1/503649"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-39040"
},
{
"db": "BID",
"id": "35053"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003400"
},
{
"db": "NVD",
"id": "CVE-2009-1594"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-262"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-39040"
},
{
"db": "BID",
"id": "35053"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-003400"
},
{
"db": "NVD",
"id": "CVE-2009-1594"
},
{
"db": "CNNVD",
"id": "CNNVD-200905-262"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-05-21T00:00:00",
"db": "VULHUB",
"id": "VHN-39040"
},
{
"date": "2009-05-20T00:00:00",
"db": "BID",
"id": "35053"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-003400"
},
{
"date": "2009-05-21T14:30:00.467000",
"db": "NVD",
"id": "CVE-2009-1594"
},
{
"date": "2009-05-21T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200905-262"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-10T00:00:00",
"db": "VULHUB",
"id": "VHN-39040"
},
{
"date": "2009-05-21T20:50:00",
"db": "BID",
"id": "35053"
},
{
"date": "2012-06-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-003400"
},
{
"date": "2018-10-10T19:37:28.940000",
"db": "NVD",
"id": "CVE-2009-1594"
},
{
"date": "2009-05-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200905-262"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200905-262"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Armorlogic Profense Web Application Firewall Vulnerabilities that bypass specific protection mechanisms",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-003400"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "permissions and access control",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200905-262"
}
],
"trust": 0.6
}
}
CVE-2009-1745 (GCVE-0-2009-1745)
Vulnerability from nvd – Published: 2009-05-21 15:00 – Updated: 2024-08-07 05:27
VLAI
EPSS
VEX
Summary
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://resources.enablesecurity.com/advisories/ES… | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/503649/100… | mailing-listx_refsource_BUGTRAQ |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2009-05-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:27:53.653Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "profense-default-password(50852)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50852"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "profense-default-password(50852)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50852"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1745",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
"refsource": "MISC",
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "profense-default-password(50852)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50852"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-1745",
"datePublished": "2009-05-21T15:00:00.000Z",
"dateReserved": "2009-05-21T00:00:00.000Z",
"dateUpdated": "2024-08-07T05:27:53.653Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-1594 (GCVE-0-2009-1594)
Vulnerability from nvd – Published: 2009-05-21 14:00 – Updated: 2024-08-07 05:20
VLAI
EPSS
VEX
Summary
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "positive model," which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://resources.enablesecurity.com/advisories/ES… | x_refsource_MISC |
| http://www.securityfocus.com/bid/35053 | vdb-entryx_refsource_BID |
| http://www.securityfocus.com/archive/1/503649/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.webappsec.org/lists/websecurity/archiv… | mailing-listx_refsource_MLIST |
Date Public
2009-05-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:20:34.599Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "profense-whitelist-security-bypass(50662)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50662"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"positive model,\" which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "profense-whitelist-security-bypass(50662)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50662"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1594",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"positive model,\" which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "profense-whitelist-security-bypass(50662)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50662"
},
{
"name": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
"refsource": "MISC",
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"refsource": "MLIST",
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-1594",
"datePublished": "2009-05-21T14:00:00.000Z",
"dateReserved": "2009-05-08T00:00:00.000Z",
"dateUpdated": "2024-08-07T05:20:34.599Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-1593 (GCVE-0-2009-1593)
Vulnerability from nvd – Published: 2009-05-21 14:00 – Updated: 2024-08-07 05:20
VLAI
EPSS
VEX
Summary
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://resources.enablesecurity.com/advisories/ES… | x_refsource_MISC |
| http://www.securityfocus.com/bid/35053 | vdb-entryx_refsource_BID |
| http://www.securityfocus.com/archive/1/503649/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.webappsec.org/lists/websecurity/archiv… | mailing-listx_refsource_MLIST |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2009-05-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:20:33.709Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
},
{
"name": "profense-blacklist-security-bypass(50663)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50663"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"negative model,\" which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
},
{
"name": "profense-blacklist-security-bypass(50663)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50663"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1593",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"negative model,\" which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
"refsource": "MISC",
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"refsource": "MLIST",
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
},
{
"name": "profense-blacklist-security-bypass(50663)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50663"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-1593",
"datePublished": "2009-05-21T14:00:00.000Z",
"dateReserved": "2009-05-08T00:00:00.000Z",
"dateUpdated": "2024-08-07T05:20:33.709Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-0468 (GCVE-0-2009-0468)
Vulnerability from nvd – Published: 2009-02-06 01:00 – Updated: 2024-08-07 04:31
VLAI
EPSS
VEX
Summary
Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/33523 | vdb-entryx_refsource_BID |
| http://osvdb.org/51660 | vdb-entryx_refsource_OSVDB |
| https://www.exploit-db.com/exploits/7919 | exploitx_refsource_EXPLOIT-DB |
| http://secunia.com/advisories/33739 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2009-01-29 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T04:31:26.253Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "33523",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "51660",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/51660"
},
{
"name": "7919",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "33739",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/33739"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-01-29T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "33523",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "51660",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/51660"
},
{
"name": "7919",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "33739",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/33739"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-0468",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "33523",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "51660",
"refsource": "OSVDB",
"url": "http://osvdb.org/51660"
},
{
"name": "7919",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "33739",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/33739"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-0468",
"datePublished": "2009-02-06T01:00:00.000Z",
"dateReserved": "2009-02-05T00:00:00.000Z",
"dateUpdated": "2024-08-07T04:31:26.253Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-0467 (GCVE-0-2009-0467)
Vulnerability from nvd – Published: 2009-02-06 01:00 – Updated: 2024-08-07 04:31
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/33523 | vdb-entryx_refsource_BID |
| https://www.exploit-db.com/exploits/7919 | exploitx_refsource_EXPLOIT-DB |
| http://osvdb.org/51659 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/33739 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2009-01-29 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T04:31:26.398Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "33523",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "7919",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "51659",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/51659"
},
{
"name": "33739",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/33739"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-01-29T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "33523",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "7919",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "51659",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/51659"
},
{
"name": "33739",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/33739"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-0467",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "33523",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "7919",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "51659",
"refsource": "OSVDB",
"url": "http://osvdb.org/51659"
},
{
"name": "33739",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/33739"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-0467",
"datePublished": "2009-02-06T01:00:00.000Z",
"dateReserved": "2009-02-05T00:00:00.000Z",
"dateUpdated": "2024-08-07T04:31:26.398Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-1745 (GCVE-0-2009-1745)
Vulnerability from cvelistv5 – Published: 2009-05-21 15:00 – Updated: 2024-08-07 05:27
VLAI
EPSS
VEX
Summary
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://resources.enablesecurity.com/advisories/ES… | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/503649/100… | mailing-listx_refsource_BUGTRAQ |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2009-05-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:27:53.653Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "profense-default-password(50852)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50852"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "profense-default-password(50852)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50852"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1745",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, has a default root password hash, and permits password-based root logins over SSH, which makes it easier for remote attackers to obtain access."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
"refsource": "MISC",
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "profense-default-password(50852)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50852"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-1745",
"datePublished": "2009-05-21T15:00:00.000Z",
"dateReserved": "2009-05-21T00:00:00.000Z",
"dateUpdated": "2024-08-07T05:27:53.653Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-1593 (GCVE-0-2009-1593)
Vulnerability from cvelistv5 – Published: 2009-05-21 14:00 – Updated: 2024-08-07 05:20
VLAI
EPSS
VEX
Summary
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "negative model," which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://resources.enablesecurity.com/advisories/ES… | x_refsource_MISC |
| http://www.securityfocus.com/bid/35053 | vdb-entryx_refsource_BID |
| http://www.securityfocus.com/archive/1/503649/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.webappsec.org/lists/websecurity/archiv… | mailing-listx_refsource_MLIST |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2009-05-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:20:33.709Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
},
{
"name": "profense-blacklist-security-bypass(50663)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50663"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"negative model,\" which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
},
{
"name": "profense-blacklist-security-bypass(50663)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50663"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1593",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"negative model,\" which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
"refsource": "MISC",
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"refsource": "MLIST",
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
},
{
"name": "profense-blacklist-security-bypass(50663)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50663"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-1593",
"datePublished": "2009-05-21T14:00:00.000Z",
"dateReserved": "2009-05-08T00:00:00.000Z",
"dateUpdated": "2024-08-07T05:20:33.709Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-1594 (GCVE-0-2009-1594)
Vulnerability from cvelistv5 – Published: 2009-05-21 14:00 – Updated: 2024-08-07 05:20
VLAI
EPSS
VEX
Summary
Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "positive model," which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://resources.enablesecurity.com/advisories/ES… | x_refsource_MISC |
| http://www.securityfocus.com/bid/35053 | vdb-entryx_refsource_BID |
| http://www.securityfocus.com/archive/1/503649/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.webappsec.org/lists/websecurity/archiv… | mailing-listx_refsource_MLIST |
Date Public
2009-05-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T05:20:34.599Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "profense-whitelist-security-bypass(50662)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50662"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-05-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"positive model,\" which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "profense-whitelist-security-bypass(50662)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50662"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-1594",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the \"positive model,\" which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "profense-whitelist-security-bypass(50662)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50662"
},
{
"name": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt",
"refsource": "MISC",
"url": "http://resources.enablesecurity.com/advisories/ES-20090500-profense.txt"
},
{
"name": "35053",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/35053"
},
{
"name": "20090520 Armorlogic Profense Web Application Firewall 2.4 multiple vulnerabilities.",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/503649/100/0/threaded"
},
{
"name": "[websecurity] 20090519 [WEB SECURITY] Trustwave\u0027s SpiderLabs Security Advisory TWSL2009-001 and EnableSecurity Advisory ES-20090500",
"refsource": "MLIST",
"url": "http://www.webappsec.org/lists/websecurity/archive/2009-05/msg00040.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-1594",
"datePublished": "2009-05-21T14:00:00.000Z",
"dateReserved": "2009-05-08T00:00:00.000Z",
"dateUpdated": "2024-08-07T05:20:34.599Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-0468 (GCVE-0-2009-0468)
Vulnerability from cvelistv5 – Published: 2009-02-06 01:00 – Updated: 2024-08-07 04:31
VLAI
EPSS
VEX
Summary
Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/33523 | vdb-entryx_refsource_BID |
| http://osvdb.org/51660 | vdb-entryx_refsource_OSVDB |
| https://www.exploit-db.com/exploits/7919 | exploitx_refsource_EXPLOIT-DB |
| http://secunia.com/advisories/33739 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2009-01-29 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T04:31:26.253Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "33523",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "51660",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/51660"
},
{
"name": "7919",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "33739",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/33739"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-01-29T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "33523",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "51660",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/51660"
},
{
"name": "7919",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "33739",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/33739"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-0468",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site request forgery (CSRF) vulnerabilities in ajax.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown the server, (2) send ping packets, (3) enable network services, (4) configure a proxy server, and (5) modify other settings via parameters in the query string."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "33523",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "51660",
"refsource": "OSVDB",
"url": "http://osvdb.org/51660"
},
{
"name": "7919",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "33739",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/33739"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-0468",
"datePublished": "2009-02-06T01:00:00.000Z",
"dateReserved": "2009-02-05T00:00:00.000Z",
"dateUpdated": "2024-08-07T04:31:26.253Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2009-0467 (GCVE-0-2009-0467)
Vulnerability from cvelistv5 – Published: 2009-02-06 01:00 – Updated: 2024-08-07 04:31
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/33523 | vdb-entryx_refsource_BID |
| https://www.exploit-db.com/exploits/7919 | exploitx_refsource_EXPLOIT-DB |
| http://osvdb.org/51659 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/33739 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2009-01-29 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T04:31:26.398Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "33523",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "7919",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "51659",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/51659"
},
{
"name": "33739",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/33739"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2009-01-29T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-09-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "33523",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "7919",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "51659",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/51659"
},
{
"name": "33739",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/33739"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2009-0467",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in proxy.html in Profense Web Application Firewall 2.6.2 and 2.6.3 allows remote attackers to inject arbitrary web script or HTML via the proxy parameter in a deny_log manage action."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "33523",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/33523"
},
{
"name": "7919",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/7919"
},
{
"name": "51659",
"refsource": "OSVDB",
"url": "http://osvdb.org/51659"
},
{
"name": "33739",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/33739"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2009-0467",
"datePublished": "2009-02-06T01:00:00.000Z",
"dateReserved": "2009-02-05T00:00:00.000Z",
"dateUpdated": "2024-08-07T04:31:26.398Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}