PT-2012-1401 · Blue Coat · Proxysg

Publicado 2012-08-26 · Atualizado 2012-08-27 · CVE-2010-5189

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Blue Coat ProxySG versions prior to 4.3.4.1 Blue Coat ProxySG versions 5.x prior to 5.4.5.1 Blue Coat ProxySG versions 5.5 prior to 5.5.4.1 Blue Coat ProxySG versions 6.x prior to 6.1.1.1

Description The issue allows remote authenticated users to execute arbitrary CLI commands by leveraging read-only administrator privileges and establishing an HTTPS session.

Recommendations For versions prior to 4.3.4.1, update to version 4.3.4.1 or later. For versions 5.x prior to 5.4.5.1, update to version 5.4.5.1 or later. For versions 5.5 prior to 5.5.4.1, update to version 5.5.4.1 or later. For versions 6.x prior to 6.1.1.1, update to version 6.1.1.1 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-5189

Produtos afetados

Proxysg

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2010-5189 · Nota de Segurança
• https://kb.bluecoat.com/index?page=content&id=SA45 · Aviso do Fabricante