NetSight
critical9.3

CVE-2010-5189

Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated users to execu…

Impact

Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote authenticated users to execute arbitrary CLI commands by leveraging read-only administrator privileges and establishing an HTTPS session.

Affected products

VendorProductAffected versions
BluecoatSgos
through 4.3.4
Versions 3.2.6, 4.1.2.1, 4.2.1.2, 4.2.1.6, 4.2.2
BluecoatProxysg
All versions
BluecoatProxysg Sg210-10
All versions
BluecoatProxysg Sg210-25
All versions
BluecoatProxysg Sg210-5
All versions
BluecoatProxysg Sg510-10
All versions
BluecoatProxysg Sg510-20
All versions
BluecoatProxysg Sg510-25
All versions
BluecoatProxysg Sg510-5
All versions
BluecoatProxysg Sg810-10
All versions
BluecoatProxysg Sg810-20
All versions
BluecoatProxysg Sg810-25
All versions

Weakness classification

References