NVD

Id
24835  
Name
CVE-2015-2855  
Description
The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not set the secure flag for the administrator"s cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, a different vulnerability than CVE-2015-4138.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-05-30  
Modified Date
2016-12-02  
Seq
2015-2855  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
131115 24835 CVE-2015-2855 VU#498348  View
131116 24835 CVE-2015-2855 74921  View
131117 24835 CVE-2015-2855 https://bto.bluecoat.com/security-advisory/sa96  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7565 JVNDB-2015-002885 Blue Coat SSL Visibility Appliance 製品の WebUI コンポーネントにおける管理者の Cookie をキャプチャされる脆弱性 Blue Coat SSL Visibility Appliance SV800、SV1800、SV2800、および SV3800 の WebUI コンポーネントは、HTTPS セッションの管理者の Cookie に secure フラグを設定しないため、この Cookie をキャプチャされる脆弱性が存在します。 CVE-2015-2855 80080 CVE-2015-2855 24835 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002885.html 2015-05-29 2015-06-03 View