CVE-2009-5119: The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter...

Security readout for executives and security teams

Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 used Apache Tomcat settings that allowed weak SSL ciphers by default. An attacker who can observe network traffic could have an easier path to recovering sensitive session information. The provided sources do not include a CVSS score or active exploitation evidence. Exposure is likely limited to environments still running Websense Web Security 7.0 or Web Filter 7.0 with Websense Manager using default Tomcat SSL settings. The bundle does not identify other affected versions or products. Treat this as a targeted legacy exposure review. It is not documented as actively exploited, but weak encryption on a security management interface can expose sensitive administrative sessions, especially in older or unsupported deployments. Mitigation focus: Check the Websense vendor advisory for supported remediation guidance.; Inventory any Websense Web Security 7.0 or Web Filter 7.0 deployments.; Review Websense Manager Tomcat SSL cipher configuration against vendor guidance..

Prepared

Jun 27, 2026, 16:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.