CVE-2015-2766 Auth bypass in n/a
Attackers can bypass authentication in Websense TRITON AP-EMAIL via brute force attacks, potentially gaining unauthorized access to the email security system.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-2766?
CVE-2015-2766 is a medium-severity authentication bypass vulnerability in n/a, published on 27 Mar 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Personal Email Manager (PEM) in Websense TRITON AP-EMAIL before 8.0.0 allows attackers to have unspecified impact via a brute force attack.
Weakness: CWE-255
Which versions are affected by CVE-2015-2766?
It affects 1 product.
Products include Websense Triton Ap Email.
How do I fix CVE-2015-2766?
No fix has been published for CVE-2015-2766 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2015-2766 being exploited?
There is no known exploitation of CVE-2015-2766 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2015-2763 Other in n/a
- CVE-2015-2767 Unspecified vulnerability in Websense TRITON AP-EMAIL before 8.0.0 has unknown impact and attack vectors, related to "Autocomplete Enabled."
- CVE-2017-11177 Path traversal in n/a
- CVE-2015-2769 Cross-site request forgery in n/a
- CVE-2015-2771 Information disclosure in n/a
Sources
Also known as GHSA-wx8f-phf2-fjqp.