PT-2007-6762 · Blue Coat · Blue Coat Proxysg

Publicado 2007-11-03 · Atualizado 2018-10-26 · CVE-2007-5796

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Blue Coat ProxySG versions prior to 4.2.6.1 Blue Coat ProxySG versions 5.x prior to 5.2.2.5

Description A cross-site scripting (XSS) issue exists in the management console, allowing remote attackers to inject arbitrary web script or HTML by modifying the URL used for loading Certificate Revocation Lists.

Recommendations For versions prior to 4.2.6.1, update to version 4.2.6.1 or later. For versions 5.x prior to 5.2.2.5, update to version 5.2.2.5 or later.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-5796

Produtos afetados

Blue Coat Proxysg

Referências · 7

• 🔥 https://exploit-db.com/exploits/30729 · Exploit
• http://securitytracker.com/id?1018888 · Nota
• http://vupen.com/english/advisories/2007/3678 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5796 · Nota de Segurança
• http://secunia.com/advisories/27452 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38213 · Nota
• http://bluecoat.com/support/securityadvisories/advisory_cross-site_scripting_vulnerability · Aviso do Fabricante