SurfControl SuperScout WebFilter User Accounts Information Disclosure Vulnerability

SurfControl SuperScout WebFilter User Accounts Information Disclosure Vulnerability

SurfControl SuperScout WebFilter is web filtering software for Microsoft Windows operating systems. SurfControl SuperScout WebFilter includes a remotely accessible reporting service.

It has been reported that SuperScout WebFilter insecurely stores some types of information. The reports server included as part of the SuperScout WebFilter package stores sensitive information in a publicly accessible, unrestricted directory. A remote user could gain access to user credentials.