Description
The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database.
References
- http://www.zebux.org/pub/Advisory/Advisory_Websense_Reporter_Password_Disclosure_200810.txt
- 32264 third-party-advisory
- 1021058 vdb-entry
- ADV-2008-2819 vdb-entry
- 31746 vdb-entry