CVE-2015-2854 | BDVDB-2026-69657 Detail

Description#

The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via vectors involving an IFRAME element.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/498348
https://bto.bluecoat.com/security-advisory/sa96
http://www.securityfocus.com/bid/74921

Exploit#

No public exploit known

History#

Version 12015-05-30Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.