CVE:CVE-2014-0347
CNNVD:CNNVD-201404-167
Websense Triton Unified Security Center等都是美国Websense公司的产品。Websense Triton Unified Security Center是一套基于Web浏览器的用于管理和报告Websense Web、电子邮件和数据安全产品的解决方案；Web Filter、Web Security Gateway和Web Security Gateway Anywhere都是Web安全产品，为网络提供威胁防护等安全功能。
多款Websense产品的Log Database和User Directories组件中的Settings模块存在信息泄露漏洞。远程攻击者可通过替换type=‘password’利用该漏洞读取明文密码。以下产品及版本受到影响：Websense Triton Unified Security Center 7.7.3版本，Web Filter 7.7.3版本，Web Security 7.7.3版本，Web Security Gateway 7.7.版本，Web Security Gateway Anywhere 7.7.3版本。
solution:Upgrade websense triton_unified_security_center to a higher version than 7.7.3,and avoid the version 7.7.3; Upgrade websense triton_web_filter to a higher version than 7.7.3,and avoid the version 7.7.3; Upgrade websense triton_web_security to a higher version than 7.7.3,and avoid the version 7.7.3; Upgrade websense triton_web_security_gateway to a higher version than 7.7.3,and avoid the version 7.7.3; Upgrade websense triton_web_security_gateway_anywhere to a higher version than 7.7.3,and avoid the version 7.7.3