4.3

CVE-2015-2855

EPSS 1.83%
Veröffentlicht 30.05.2015 19:59:07
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cret@cert.org
CVE-Watchlists
Login
Unerledigt
Login

The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not set the secure flag for the administrator's cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, a different vulnerability than CVE-2015-4138.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Blue Coat ≫ Ssl Visibility Appliance Sv800 Firmware Version <= 3.8.3

Blue Coat ≫ Ssl Visibility Appliance Sv800 Version-

Blue Coat ≫ Ssl Visibility Appliance Sv1800 Firmware Version <= 3.8.3

Blue Coat ≫ Ssl Visibility Appliance Sv1800 Version-

Blue Coat ≫ Ssl Visibility Appliance Sv3800 Firmware Version <= 3.8.3

Blue Coat ≫ Ssl Visibility Appliance Sv3800 Version-

Blue Coat ≫ Ssl Visibility Appliance Sv2800 Firmware Version <= 3.8.3

Blue Coat ≫ Ssl Visibility Appliance Sv2800 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.83%	0.824

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.kb.cert.org/vuls/id/498348

Third Party Advisory

US Government Resource

http://www.securityfocus.com/bid/74921

https://bto.bluecoat.com/security-advisory/sa96

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-2855

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-2855

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-2855

EUVD