Lucene search

K
nvd[email protected]NVD:CVE-2014-2033
HistoryMar 02, 2014 - 5:55 p.m.

CVE-2014-2033

2014-03-0217:55:02
CWE-264
web.nvd.nist.gov

7.9 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.3%

The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2.15.3, 6.4 through 6.4.6.1, and 6.3 and 6.5 before 6.5.4 allows remote authenticated users to bypass intended access restrictions during a time window after account deletion or modification by leveraging knowledge of previously valid credentials.

Affected configurations

NVD
Node
bluecoatproxysgosRange5.55.5.11.3
OR
bluecoatproxysgosRange6.16.1.6.3
OR
bluecoatproxysgosRange6.26.2.15.3
OR
bluecoatproxysgosRange6.46.4.6.1
OR
bluecoatproxysgosRange6.56.5.4
OR
bluecoatproxysgosMatch6.3

7.9 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.3%

Related for NVD:CVE-2014-2033