CVE

Id
81415  
CVE No.
CVE-2015-4138  
Status
Candidate  
Description
The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not include the HTTPOnly flag in a Set-Cookie header for the administrator"s cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, a different vulnerability than CVE-2015-2855.  
Phase
Assigned (20150530)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
732332 81415 CVE-2015-4138 CONFIRM:https://bto.bluecoat.com/security-advisory/sa96  View
732333 81415 CVE-2015-4138 CERT-VN:VU#498348  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7869 JVNDB-2015-003189 Cisco Cloud Portal アプライアンス上の Prime Service Catalog の Cloud Portal におけるデータを変更される脆弱性 Cisco Cloud Portal アプライアンス上の Prime Service Catalog の Cloud Portal には、データを変更される脆弱性が存在します。 CVE-2015-4190 81415 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003189.html  View