PT-2015-6521 · Blue Coat · Blue Coat Proxysg

Published 2015-12-07 · Updated 2019-02-12 · CVE-2015-4334

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Blue Coat ProxySG versions prior to 6.2.16.5 Blue Coat ProxySG versions prior to 6.5.7.1 Blue Coat ProxySG versions prior to 6.6.2.1

Description The default configuration of SGOS in Blue Coat ProxySG forwards authentication challenges from upstream origin content servers when used in an explicit proxy deployment. This makes it easier for remote attackers to obtain sensitive information via a 407 HTTP status code. This issue is demonstrated when using NTLM authentication.

Recommendations For versions prior to 6.2.16.5, update to version 6.2.16.5 or later. For versions prior to 6.5.7.1, update to version 6.5.7.1 or later. For versions prior to 6.6.2.1, update to version 6.6.2.1 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-4334

Affected Products

Blue Coat Proxysg

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-4334 · Security Note
• https://bto.bluecoat.com/security-advisory/sa93 · Vendor Advisory
• http://securitytracker.com/id/1032149 · Note
• https://twitter.com/bugch3ck/status/591492380294979585 · Note