Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Misc. >> WebWasher Classic HTTP CONNECT Unauthorized Access Weakness


Vulnerability Assessment Details

WebWasher Classic HTTP CONNECT Unauthorized Access Weakness

Vulnerability Assessment Summary
Searches for the existence of WebWasher Proxy

Detailed Explanation for this Vulnerability Assessment

There is a flaw in the remote WebWasher Proxy. The Proxy, when issued
a CONNECT command for 127.0.0.1 (or localhost/loopback), will comply with
the request and initiate a connection to the local machine.

This bypasses any sort of firewalling as well as gives access to local
applications which are only bound to the loopback.

Solution: Upgrade to a version of WebWasher greater than 3.3.
Network Security Threat Level: High

Networks Security ID: 12394

Vulnerability Assessment Copyright: This script is Copyright (C) 2005 Tenable Network Security

Cables, Connectors


For Lenovo ideapad Flex 5 15IIL05 15ITL05 LCD Touch Screen Bezel 5D10S39643 New picture

For Lenovo ideapad Flex 5 15IIL05 15ITL05 LCD Touch Screen Bezel 5D10S39643 New

$135.00



~OVERSTOCK~ 15.6

~OVERSTOCK~ 15.6" Lenovo ThinkPad Laptop: Intel i5 8GB RAM 256GB SSD Win 10

$169.99



For Lenovo Yoga 7 16IAP7 Palmrest Upper Case Backlit Keyboard AG 5CB1J01825 New picture

For Lenovo Yoga 7 16IAP7 Palmrest Upper Case Backlit Keyboard AG 5CB1J01825 New

$126.59



Lenovo Legion 5 15.6

Lenovo Legion 5 15.6" Gaming Laptop AMD R7 7735HS RTX 4060 16GB RAM 512GB SSD

$849.99



Lenovo IdeaPad Pro 5i, 16″, i5-13500H, 16 GB, 1 TB SSD, RTX 3050, 120Hz, Laptop picture

Lenovo IdeaPad Pro 5i, 16″, i5-13500H, 16 GB, 1 TB SSD, RTX 3050, 120Hz, Laptop

$709.99



Lenovo 300e 11.6

Lenovo 300e 11.6" 2in1 Touchscreen Laptop Computer 4GB RAM 64GB SSD Windows 10

$83.99



Lenovo ThinkPad E560 Intel Core i5-6200U 2.3GHz 8GB RAM 500GB HDD W10P w/Charger picture

Lenovo ThinkPad E560 Intel Core i5-6200U 2.3GHz 8GB RAM 500GB HDD W10P w/Charger

$74.99



Lenovo ThinkPad Yoga 11e 11.6

Lenovo ThinkPad Yoga 11e 11.6" 2in1 Touch Intel Core i3 4GB RAM 128GB SSD Win10

$58.00



Lenovo Notebook ThinkPad L14 AMD Gen 3 Laptop, 14

Lenovo Notebook ThinkPad L14 AMD Gen 3 Laptop, 14" FHD IPS 60Hz

$409.99



Lenovo Notebook ThinkPad T14s Gen 4 Laptop, 14

Lenovo Notebook ThinkPad T14s Gen 4 Laptop, 14" IPS 60Hz, i7-1355U,

$704.63



Discussions

No Discussions have been posted on this vulnerability.