CVE-2008-4515

Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which allows remote attackers to bypass authentication and access the (1) summary, (2) detail, (3) overrides, and (4) pwemail pages by disabling JavaScript.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2008-10-09

Last modified

2024-08-07

Weaknesses

CWE-287

Affected products

• K9 Web Protection (Blue Coat Systems)

References

• http://dicas3000.blogspot.com/2008/10/blue-coat-k9-web-protection-v40230-beta.html
• http://seclists.org/fulldisclosure/2008/Oct/0070.html
• http://www.securityfocus.com/bid/31584
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45696