CVE-2010-5189

Опубликовано: 26 авг. 2012

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated users to execute arbitrary CLI commands by leveraging read-only administrator privileges and establishing an HTTPS session.

Ссылки

https://kb.bluecoat.com/index?page=content&id=SA45
Vendor Advisory
https://kb.bluecoat.com/index?page=content&id=SA45
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:bluecoat:sgos:*:*:*:*:*:*:*:*

Версия до 4.3.4 (включая)

cpe:2.3:o:bluecoat:sgos:3.2.6:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.1.2.1:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.1.2:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.1.6:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.2:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.2.1:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.2.2:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.3:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.3.4:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.3.7:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.3.12:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.3.21:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.3.26:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.4.1:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.5:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.5.1:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.6:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.6.1:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.6.4:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:4.2.7.1:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:5.2.2.4:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:5.4.5:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:5.5.4:*:*:*:*:*:*:*

cpe:2.3:o:bluecoat:sgos:6.1:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:bluecoat:proxysg:*:*:*:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg510-5:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg810-5:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:full_proxy:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:acceleration:*:*:*:*:*

cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:full_proxy:*:*:*:*:*

EPSS

Процентиль: 68%

0.00567

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-3xrc-gcq8-ccw2

github

больше 3 лет назад