SA16 : Blue Coat Reporter Vulnerabilities

SYMSA1061
Last Updated May 20, 2005
Initial Publication Date May 20, 2005
Copy Article Title/URL
Feedback
Subscribe
  • Status: Closed
  • Severity: Low
  • CVSS Base Score:

The following vulnerabilities have been discovered:

  • An authenticated user with a non-administrative privileges could gain administrative privileges
  • A remote attacker with no user privileges could add a license
  • A user with administrative privileges could execute a cross-scripting attack by entering a specially formed username in the Add User window
  • A remote attacker could execute a cross-scripting attack by entering a specially formed license key in the Licensing page.

Blue Coat Systems considers this vulnerability to be low priority due to the fact that Blue Coat Reporter is not a product that is designed or recommended to be run outside of a secure intranet environment.

If you would like a workaround for this issue please contact Blue Coat Technical Support.

Legacy ID: SA16

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.