Authentication flaw

2008-10-0918:00:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.6%

JSON

Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which allows remote attackers to bypass authentication and access the (1) summary, (2) detail, (3) overrides, and (4) pwemail pages by disabling JavaScript.

CPENameOperatorVersion
k9_web_protectioneq4.0.230 beta

CPE	Name	Operator	Version
	k9_web_protection	eq	4.0.230 beta

References

seclists.org/fulldisclosure/2008/Oct/0070.html

www.securityfocus.com/bid/31584

dicas3000.blogspot.com/2008/10/blue-coat-k9-web-protection-v40230-beta.html

exchange.xforce.ibmcloud.com/vulnerabilities/45696