UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.
| Software | From | Fixed in |
|---|---|---|
| surfcontrol / web_filter | 4.1 | 4.1.x |
| surfcontrol / superscout_web_filter | 3.0 | 3.0.x |
| surfcontrol / web_filter | 4.0 | 4.0.x |
| surfcontrol / superscout_web_filter | 3.0.3 | 3.0.3.x |