|Number of vulnerabilities||1|
Server applications / IDS/IPS systems, Firewalls and proxy servers
|Vendor||Blue Coat Systems|
This security bulletin contains one low risk vulnerability.
CWE-284 - Improper Access Control
Exploit availability: NoDescription
The vulnerability allows a remote authenticated attacker to gain elevated privileges on the target system.
The weakness exists due to access control flaw in the web interface. A remote read-only administrative attacker can gain write privileges to modify the appliance settings and policy configuration and perform arbitrary management tasks via the management console.
The vulnerability is addressed in the following versions: 126.96.36.199, 188.8.131.52, 184.108.40.206.
ProxySG: 6.5 - 6.7CPE2.3
Q & A
Can this vulnerability be exploited remotely?
How the attacker can exploit this vulnerability?
Is there known malware, which exploits this vulnerability?