Design/Logic Flaw

2015-05-3019:59:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.3%

JSON

The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via vectors involving an IFRAME element.

CPENameOperatorVersion
ssl_visibility_appliance_sv1800_firmwarele3.8.3
ssl_visibility_appliance_sv2800_firmwarele3.8.3
ssl_visibility_appliance_sv3800_firmwarele3.8.3
ssl_visibility_appliance_sv800_firmwarele3.8.3

Name	Operator	Version
ssl_visibility_appliance_sv1800_firmware	le	3.8.3
ssl_visibility_appliance_sv2800_firmware	le	3.8.3
ssl_visibility_appliance_sv3800_firmware	le	3.8.3
ssl_visibility_appliance_sv800_firmware	le	3.8.3