VulnerabilityModified

CVE-2015-2853

Session fixation vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack web sessions by providing a session ID.

MEDIUM 6.8EPSS 1.51%

Does this matter?

Lower severity and a low EPSS score (1.51%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 1.51% probability · 73th percentile
CISA KEV: Not listed
Affected: blue coat/ssl visibility appliance sv3800 firmware · blue coat/ssl visibility appliance sv2800 firmware · blue coat/ssl visibility appliance sv1800 firmware · blue coat/ssl visibility appliance sv800 firmware
Source: cret@cert.org

References

http://www.kb.cert.org/vuls/id/498348US Government Resource
http://www.securityfocus.com/bid/74921
https://bto.bluecoat.com/security-advisory/sa96
http://www.kb.cert.org/vuls/id/498348US Government Resource
http://www.securityfocus.com/bid/74921
https://bto.bluecoat.com/security-advisory/sa96

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.