CVE-2008-4515

High

Description

Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which allows remote attackers to bypass authentication and access the (1) summary, (2) detail, (3) overrides, and (4) pwemail pages by disabling JavaScript.

SeverityHigh
CVSS7.5
Exploit probability—
ProductBlue Coat Systems K9 Web Protection
PublishedOct 9, 2008
First seenOct 9, 2008

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
blue_coat_systems k9_web_protection4.0.230—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.