CVE-2014-2033

2014-03-0217:55:02

CWE-264

[email protected]

web.nvd.nist.gov

sgos

blue coat proxysg

caching

bypass

cve-2014-2033

nvd

7.9 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.2%

JSON

The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2.15.3, 6.4 through 6.4.6.1, and 6.3 and 6.5 before 6.5.4 allows remote authenticated users to bypass intended access restrictions during a time window after account deletion or modification by leveraging knowledge of previously valid credentials.

Affected configurations

NVD

Node

bluecoatproxysgosRange5.5–5.5.11.3

bluecoatproxysgosRange6.1–6.1.6.3

bluecoatproxysgosRange6.2–6.2.15.3

bluecoatproxysgosRange6.4–6.4.6.1

bluecoatproxysgosRange6.5–6.5.4

bluecoatproxysgosMatch6.3

CPENameOperatorVersion
bluecoat:proxysgosbluecoat proxysgosle5.5.11.3
bluecoat:proxysgosbluecoat proxysgosle6.1.6.3
bluecoat:proxysgosbluecoat proxysgosle6.2.15.3
bluecoat:proxysgosbluecoat proxysgosle6.4.6.1
bluecoat:proxysgosbluecoat proxysgoslt6.5.4
bluecoat:proxysgosbluecoat proxysgoseq6.3

CPE	Name	Operator	Version
bluecoat:proxysgos	bluecoat proxysgos	le	5.5.11.3
bluecoat:proxysgos	bluecoat proxysgos	le	6.1.6.3
bluecoat:proxysgos	bluecoat proxysgos	le	6.2.15.3
bluecoat:proxysgos	bluecoat proxysgos	le	6.4.6.1
bluecoat:proxysgos	bluecoat proxysgos	lt	6.5.4
bluecoat:proxysgos	bluecoat proxysgos	eq	6.3