Lucene search
HistoryOct 09, 2008 - 6:00 p.m.
CVE-2008-4515
cve-2008-4515
blue coat k9
web protection
authentication bypass
javascript
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.6%
Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which allows remote attackers to bypass authentication and access the (1) summary, (2) detail, (3) overrides, and (4) pwemail pages by disabling JavaScript.
Affected configurations
Node
blue_coat_systemsk9_web_protectionMatch4.0.230beta
| CPE | Name | Operator | Version |
|---|---|---|---|
| blue_coat_systems:k9_web_protection | blue coat systems k9 web protection | eq | 4.0.230 |
Related
prion
prion
Authentication flaw
2008-10-09 18:00:00
nvd
nvd
CVE-2008-4515
2008-10-09 18:00:02
cvelist
cvelist
CVE-2008-4515
2008-10-09 16:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.6%
Related for CVE-2008-4515