CVE-2015-1454 | BDVDB-2026-67819 Detail

Description#

Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3.151952 does not properly validate certain certificates, which allows man-in-the-middle attackers to spoof ProxySG Client Managers, and consequently modify configurations and execute arbitrary software updates, via a crafted certificate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bto.bluecoat.com/security-advisory/sa89
http://secunia.com/advisories/62617

Exploit#

No public exploit known

History#

Version 12015-02-02Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.