CVE-2014-0347: The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before

Routine

LOW 3.5DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2014-0347 is a low-severity flaw (CVSS 3.5) affecting triton unified security center, triton web filter, triton web security. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to read cleartext passwords by replacing type="password" with type="text" in an INPUT element in the (1) Log Database or (2) User Directories component.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	3.5 (Low)
EPSS exploit chance	1.3% (top 29%)
CISA exploited list	No
Weakness	CWE-255
Published	2014-04-12
Last modified	2026-06-17

Publisher (CNA): CERT/CC · Vendor: websense

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2014-04-12 04:37 UTCPublished CVE record published
2026-06-17 00:02 UTCUpdated Record last modified

websense triton unified security center DOWNGRADE

Affected: 7.7.3

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.7.3

1. Check installed version

apt-cache policy triton-unified-security-center || rpm -q triton-unified-security-center || triton-unified-security-center --version

2. No fixed release: DOWNGRADE to a release before 7.7.3 (Debian / Ubuntu)

apt-cache madison triton-unified-security-center sudo apt install triton-unified-security-center=<VERSION_BEFORE_7.7.3> sudo apt-mark hold triton-unified-security-center

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list triton-unified-security-center sudo dnf downgrade triton-unified-security-center-<VERSION_BEFORE_7.7.3> sudo dnf versionlock add triton-unified-security-center

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

websense triton web filter DOWNGRADE

Affected: 7.7.3

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.7.3

1. Check installed version

apt-cache policy triton-web-filter || rpm -q triton-web-filter || triton-web-filter --version

2. No fixed release: DOWNGRADE to a release before 7.7.3 (Debian / Ubuntu)

apt-cache madison triton-web-filter sudo apt install triton-web-filter=<VERSION_BEFORE_7.7.3> sudo apt-mark hold triton-web-filter

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list triton-web-filter sudo dnf downgrade triton-web-filter-<VERSION_BEFORE_7.7.3> sudo dnf versionlock add triton-web-filter

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

websense triton web security DOWNGRADE

Affected: 7.7.3

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.7.3

1. Check installed version

apt-cache policy triton-web-security || rpm -q triton-web-security || triton-web-security --version

2. No fixed release: DOWNGRADE to a release before 7.7.3 (Debian / Ubuntu)

apt-cache madison triton-web-security sudo apt install triton-web-security=<VERSION_BEFORE_7.7.3> sudo apt-mark hold triton-web-security

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list triton-web-security sudo dnf downgrade triton-web-security-<VERSION_BEFORE_7.7.3> sudo dnf versionlock add triton-web-security

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

websense triton web security gateway DOWNGRADE

Affected: 7.7.3

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.7.3

1. Check installed version

apt-cache policy triton-web-security-gateway || rpm -q triton-web-security-gateway || triton-web-security-gateway --version

2. No fixed release: DOWNGRADE to a release before 7.7.3 (Debian / Ubuntu)

apt-cache madison triton-web-security-gateway sudo apt install triton-web-security-gateway=<VERSION_BEFORE_7.7.3> sudo apt-mark hold triton-web-security-gateway

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list triton-web-security-gateway sudo dnf downgrade triton-web-security-gateway-<VERSION_BEFORE_7.7.3> sudo dnf versionlock add triton-web-security-gateway

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

websense triton web security gateway anywhere DOWNGRADE

Affected: 7.7.3

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.7.3

1. Check installed version

apt-cache policy triton-web-security-gateway-anywhere || rpm -q triton-web-security-gateway-anywhere || triton-web-security-gateway-anywhere --version

2. No fixed release: DOWNGRADE to a release before 7.7.3 (Debian / Ubuntu)

apt-cache madison triton-web-security-gateway-anywhere sudo apt install triton-web-security-gateway-anywhere=<VERSION_BEFORE_7.7.3> sudo apt-mark hold triton-web-security-gateway-anywhere

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list triton-web-security-gateway-anywhere sudo dnf downgrade triton-web-security-gateway-anywhere-<VERSION_BEFORE_7.7.3> sudo dnf versionlock add triton-web-security-gateway-anywhere

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2014-0347?

triton unified security center: downgrade or apply the listed mitigation; triton web filter: downgrade or apply the listed mitigation; triton web security: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2014-0347 being exploited?

CVE-2014-0347 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2014-0347 affect?

CVE-2014-0347 affects triton unified security center, triton web filter, triton web security. Severity is low (CVSS 3.5). The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.

How urgent is CVE-2014-0347?

Priority 30/100. No elevated risk signals yet.

References

← Back to latest CVEs