CVEvulnerability
CVE-2014-2033
7.9 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-03-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.9 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2.15.3, 6.4 through 6.4.6.1, and 6.3 and 6.5 before 6.5.4 allows remote authenticated users to bypass intended access restrictions during a time window after account deletion or modification by leveraging knowledge of previously valid credentials.
Affected configurations
• bluecoat proxysgos (>= 5.5 <= 5.5.11.3)
• bluecoat proxysgos (>= 6.1 <= 6.1.6.3)
• bluecoat proxysgos (>= 6.2 <= 6.2.15.3)
• bluecoat proxysgos (>= 6.4 <= 6.4.6.1)
• bluecoat proxysgos (>= 6.5 < 6.5.4)
• bluecoat proxysgos 6.3
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/221620 US Government Resource
- https://kb.bluecoat.com/index?page=content&id=SA77 Vendor Advisory
- http://www.kb.cert.org/vuls/id/221620 US Government Resource
- https://kb.bluecoat.com/index?page=content&id=SA77 Vendor Advisory