CVE-2004-2397

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates.

Ссылки

http://secunia.com/advisories/11627
Broken Link
Patch
Vendor Advisory
http://www.bluecoat.com/support/knowledge/advisory_private_key_compromise.html
Broken Link
Patch
Vendor Advisory
http://www.osvdb.org/6218
Broken Link
http://www.securityfocus.com/bid/10371
Broken Link
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16182
Third Party Advisory
VDB Entry
http://secunia.com/advisories/11627
Broken Link
Patch
Vendor Advisory
http://www.bluecoat.com/support/knowledge/advisory_private_key_compromise.html
Broken Link
Patch
Vendor Advisory
http://www.osvdb.org/6218
Broken Link
http://www.securityfocus.com/bid/10371
Broken Link
Patch
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16182
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:broadcom:bluecoat_security_gateway:*:*:*:*:*:*:*:*

Версия от 3.0 (включая) до 3.1.3.13 (включая)

cpe:2.3:o:broadcom:bluecoat_security_gateway:3.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00341

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-312

Связанные уязвимости

GHSA-qm29-mf5j-82rg