CVE-2014-2033 The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2.15.3, 6.4 through 6.4.6.1, and 6.3 and 6.5 before 6.5.4 allows remote authenticated users to...
HighCVSS 7.9
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2.15.3, 6.4 through 6.4.6.1, and 6.3 and 6.5 before 6.5.4 allows remote authenticated users to bypass intended access restrictions during a time window after account deletion or modification by leveraging knowledge of previously valid credentials.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bluecoat proxysgos | >= 5.5, <= 5.5.11.3 | No fix listed |
| bluecoat proxysgos | >= 6.1, <= 6.1.6.3 | No fix listed |
| bluecoat proxysgos | >= 6.2, <= 6.2.15.3 | No fix listed |
| bluecoat proxysgos | >= 6.4, <= 6.4.6.1 | No fix listed |
| bluecoat proxysgos | >= 6.5, < 6.5.4 | 6.5.4 |
| bluecoat proxysgos | = 6.3 | No fix listed |
References
- VU#221620 third-party-advisory us-government-resource
- kb.bluecoat.com vendor-advisory