6.8
CVE-2015-2853
- EPSS 1.53%
- Veröffentlicht 30.05.2015 19:59:06
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle cret@cert.org
- CVE-Watchlists
- Unerledigt
LoginSession fixation vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack web sessions by providing a session ID.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Blue Coat ≫ Ssl Visibility Appliance Sv3800 Firmware Version <= 3.8.3
Blue Coat ≫ Ssl Visibility Appliance Sv2800 Firmware Version <= 3.8.3
Blue Coat ≫ Ssl Visibility Appliance Sv1800 Firmware Version <= 3.8.3
Blue Coat ≫ Ssl Visibility Appliance Sv800 Firmware Version <= 3.8.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.53% | 0.808 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|