VulnerabilityModified
CVE-2015-2852
Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack the authentication of administrators.
MEDIUM 4.3EPSS 0.69%
Does this matter?
Lower severity and a low EPSS score (0.69%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack the authentication of administrators.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 0.69% probability · 51th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- blue coat/ssl visibility appliance sv2800 firmware · blue coat/ssl visibility appliance sv1800 firmware · blue coat/ssl visibility appliance sv3800 firmware · blue coat/ssl visibility appliance sv800 firmware
- Source
- cret@cert.org
References
- http://www.kb.cert.org/vuls/id/498348Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/74921
- https://bto.bluecoat.com/security-advisory/sa96Vendor Advisory
- http://www.kb.cert.org/vuls/id/498348Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/74921
- https://bto.bluecoat.com/security-advisory/sa96Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.