UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Superscout_web_filter | Surfcontrol | 3.0 (including) | 3.0 (including) |
| Superscout_web_filter | Surfcontrol | 3.0.3 (including) | 3.0.3 (including) |
| Web_filter | Surfcontrol | 4.0 (including) | 4.0 (including) |
| Web_filter | Surfcontrol | 4.1 (including) | 4.1 (including) |