Trusted Design

Blue Coat SSL Appliance contains multiple vulnerabilities

概要

Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800, versions 3.6.x to 3.8.3, contain multiple vulnerabilities. Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800, versions 3.6.x to 3.8.3, contain multiple vulnerabilities. CWE-352: Cross-Site Request Forgery (CSRF) - CVE-2015-2852. Blue Coat SSL Visibility Appliance contains a cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request. CWE-384: Session Fixation - CVE-2015-2853 A user's session ID is set prior to authentication, and is not invalidated or changed at the time of authentication. An attacker capable of obtaining or setting a session ID can hijack a victim user's session. CWE-20: Improper Input Validation - CVE-2015-2854 Blue Coat SSL Visibility Appliance does not enforce same origin policy in X-Frame-Options response headers. An attacker can conduct clickj

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Exploring CVE-2015-2545 and its users (score: 0.44)
• Firefox CVE-2015-4495 exploitation (score: 0.43)
• BV8S RU Phishing (score: 0.40)
• Microsoft Security Bulletin MS15-093 - Internet Explorer RCE (score: 0.39)
• Crestron Electronics DM-TXRX-100-STR web interface contains multiple vulnerabilities (score: 0.39)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る