CVE-2015-2746

published 2015-03-26

CVE-2015-2746: The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before…

Priority P3 56 medium 6.5 CVSS 2.0

AV N AC L Au S C P I P A P

EXPLOIT

The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before 7.8.4 Hotfix 02 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the "second" parameter of a command, as demonstrated by the Destination parameter in the ping command.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
websense	triton	—	—
websense	v-series_appliances	<= 7.7	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-77