CVE-2015-8597

CVE-2015-8597 affects Blue Coat ProxySG (6.5 before 6.5.8.8) and Advanced Secure Gateway (ASG) 6.6, describing an open redirect vulnerability via coaching pages that can steer users to arbitrary URLs using a base64-encoded URL alongside a plaintext URL. The issue enables potential phishing by exp...

SA107 : ProxySG and ASG Coaching Page Redirect

SUMMARY The URL displayed by ProxySG and ASG in a coaching page may differ from the actual URL that the user will be directed to after clicking Accept. A user who clicks on a specially crafted URL can be directed to an undesired or possibly malicious web site. AFFECTED PRODUCTS Advanced Secure...