Lucene search

K
cve[email protected]CVE-2014-2565
HistoryApr 30, 2014 - 2:22 p.m.

CVE-2014-2565

2014-04-3014:22:06
CWE-78
web.nvd.nist.gov
18
blue coat
cas
command injection
vulnerability
cve-2014-2565

6.5 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:H/Au:S/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.2%

The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to “command injection.”

Affected configurations

NVD
Node
bluecoatcontent_analysis_system_softwareRange1.1.2.1
OR
bluecoatcontent_analysis_system_softwareMatch1.1
OR
bluecoatcontent_analysis_system_softwareMatch1.1.1.1
AND
bluecoatcontent_analysis_systemMatch-

6.5 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:H/Au:S/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.2%

Related for CVE-2014-2565