CVE-2015-1454 in ProxyClient
Zusammenfassung (Englisch)
Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3.151952 does not properly validate certain certificates, which allows man-in-the-middle attackers to spoof ProxySG Client Managers, and consequently modify configurations and execute arbitrary software updates, via a crafted certificate.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservieren
02.02.2015
Veröffentlichung
02.02.2015
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 73835 | Bluecoat ProxyClient Software Update schwache Verschlüsselung | 310 | Nicht definiert | Offizieller Fix | CVE-2015-1454 |