PT-2012-2105 · Blue Coat · Blue Coat Reporter

Published 2012-08-26 · Updated 2012-08-27 · CVE-2011-5127

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Blue Coat Reporter versions 9.x before 9.2.4.13 Blue Coat Reporter versions 9.2.5.x before 9.2.5.1 Blue Coat Reporter versions 9.3 before 9.3.1.2

Description The issue allows remote attackers to read arbitrary files and consequently execute arbitrary code via an unspecified HTTP request. This is a directory traversal vulnerability.

Recommendations For Blue Coat Reporter versions 9.x before 9.2.4.13, update to version 9.2.4.13 or later. For Blue Coat Reporter versions 9.2.5.x before 9.2.5.1, update to version 9.2.5.1 or later. For Blue Coat Reporter versions 9.3 before 9.3.1.2, update to version 9.3.1.2 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-5127

Affected Products

Blue Coat Reporter

References · 3

• 🔥 https://exploit-db.com/exploits/17883 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5127 · Security Note
• https://kb.bluecoat.com/index?page=content&id=SA60 · Vendor Advisory