CVE-2015-2853: Medium severity broadcom ssl visibility appliance vulnerability
Session fixation vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack web sessions by providing a session ID.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2853?
CVE-2015-2853 has a high severity rating due to the potential for remote attackers to hijack web sessions.
How do I fix CVE-2015-2853?
To resolve CVE-2015-2853, upgrade the Blue Coat SSL Visibility Appliance firmware to version 3.8.4 or later.
What systems are affected by CVE-2015-2853?
CVE-2015-2853 affects the Blue Coat SSL Visibility Appliance models SV800, SV1800, SV2800, and SV3800 running firmware versions 3.6.x to 3.8.3.
What type of attack does CVE-2015-2853 allow?
CVE-2015-2853 allows attackers to conduct session fixation attacks, potentially taking control of user sessions.
What is session fixation in relation to CVE-2015-2853?
Session fixation in CVE-2015-2853 refers to a vulnerability where attackers can set a specific session ID, enabling them to hijack user sessions.