CVE Daily

CVE-2005-0316

WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly ...

High CVSS 7.5

Overview

WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.

CWE: N/A Published: 2005-01-28T05:00:00.000
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags