NetSight
medium5.0

CVE-2010-5190

The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS…

Impact

The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypass JavaScript detection via HTML entities.

Affected products

VendorProductAffected versions
BluecoatSgos
through 4.3.4
Versions 3.2.6, 4.1.2.1, 4.2.1.2, 4.2.1.6, 4.2.2
BluecoatProxysg
All versions
BluecoatProxysg Sg210-10
All versions
BluecoatProxysg Sg210-25
All versions
BluecoatProxysg Sg210-5
All versions
BluecoatProxysg Sg510-10
All versions
BluecoatProxysg Sg510-20
All versions
BluecoatProxysg Sg510-25
All versions
BluecoatProxysg Sg510-5
All versions
BluecoatProxysg Sg810-10
All versions
BluecoatProxysg Sg810-20
All versions
BluecoatProxysg Sg810-25
All versions

Weakness classification

References