Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUBDIR/.. where the desired file is in the parentdir, (3) a /./, or (4) URL-encoded characters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Websweeper | Baltimore_technologies | 4.02 (including) | 4.02 (including) |