Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUBDIR/.. where the desired file is in the parentdir, (3) a /./, or (4) URL-encoded characters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WEBsweeper 受限目录内容泄漏漏洞
Vulnerability Description
CVE(CAN) ID: CAN-2001-1152 WEBSweeper 是Baltimore 科技公司的web内容安全解决方案。它保证客户实现HTTP，FTP传 输的内容安全策略。它可以在网关处进行URL过滤。然而，由于存在一些设计漏洞，允许 攻击者轻易地绕过管理员设置的限制。内部用户可以绕过WebSweeper的限制，经过授权的 web服务器也可以重定向用户到那些未经授权的web服务器。
CVSS Information
N/A
Vulnerability Type
N/A