CVE-2010-5191 Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remote attackers to hijack the authentication of administrators for requests that (1)...
HighCVSS 9.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password, (2) modify a policy, or (3) restart the device.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bluecoat avos | <= 3.2.6 | No fix listed |
| bluecoat avos | = 3.1 | No fix listed |
| bluecoat avos | = 3.2 | No fix listed |
| bluecoat proxyav | All versions | No fix listed |