PT-2012-1404 · Blue Coat · Blue Coat Proxysg

Published 2012-08-26 · Updated 2017-08-29 · CVE-2010-5192

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Blue Coat ProxySG versions prior to 4.3.4.1 Blue Coat ProxySG versions 5.x prior to 5.4.5.1 Blue Coat ProxySG versions 5.5 prior to 5.5.4.1 Blue Coat ProxySG versions 6.x prior to 6.1.1.1

Description A cross-site scripting (XSS) issue exists in the Java Management Console of Blue Coat ProxySG, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For versions prior to 4.3.4.1, update to SGOS 4.3.4.1 or later. For versions 5.x prior to 5.4.5.1, update to SGOS 5.4.5.1 or later. For versions 5.5 prior to 5.5.4.1, update to SGOS 5.5.4.1 or later. For versions 6.x prior to 6.1.1.1, update to SGOS 6.1.1.1 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2010-5192

Affected Products

Blue Coat Proxysg

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2010-5192 · Security Note
• http://securityfocus.com/bid/43675 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62240 · Note
• http://securitytracker.com/id?1024503 · Note
• https://kb.bluecoat.com/index?page=content&id=SA47 · Note
• http://vupen.com/english/advisories/2010/2562 · Note
• http://secunia.com/advisories/41695 · Note
• http://osvdb.org/68322 · Note