Design/Logic Flaw

2015-05-3019:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.0%

JSON

The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not set the secure flag for the administrator’s cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, a different vulnerability than CVE-2015-4138.

CPENameOperatorVersion
ssl_visibility_appliance_sv1800_firmwarele3.8.3
ssl_visibility_appliance_sv2800_firmwarele3.8.3
ssl_visibility_appliance_sv3800_firmwarele3.8.3
ssl_visibility_appliance_sv800_firmwarele3.8.3

Name	Operator	Version
ssl_visibility_appliance_sv1800_firmware	le	3.8.3
ssl_visibility_appliance_sv2800_firmware	le	3.8.3
ssl_visibility_appliance_sv3800_firmware	le	3.8.3
ssl_visibility_appliance_sv800_firmware	le	3.8.3