CVE-2015-2852: CSRF
Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack the authentication of administrators.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2852?
CVE-2015-2852 is considered a high-severity cross-site request forgery vulnerability that can lead to unauthorized administrator access.
How do I fix CVE-2015-2852?
To address CVE-2015-2852, upgrade the Blue Coat SSL Visibility Appliance firmware to version 3.8.4 or later.
Which versions of the Blue Coat SSL Visibility Appliance are affected by CVE-2015-2852?
CVE-2015-2852 affects versions 3.6.x through 3.8.3 of the Blue Coat SSL Visibility Appliance.
What are the risks associated with CVE-2015-2852?
Exploitation of CVE-2015-2852 could allow an attacker to hijack administrator sessions and perform unauthorized actions.
Is there a workaround for CVE-2015-2852?
There is no documented workaround for CVE-2015-2852; the recommended action is to update to the latest firmware.