Vulnerability CVE-2010-5190 - CERT Civis.Net

Vulnerability Name:

CVE-2010-5190 (CCN-62601)

Assigned:

2010-10-15

Published:

2010-10-15

Updated:

2012-08-27

Summary:

The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypass JavaScript detection via HTML entities.

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Bypass Security

References:

Source: MITRE
Type: CNA
CVE-2010-5190

Source: CCN
Type: SA41887
Blue Coat ProxySG JavaScript Detection Bypass

Source: CCN
Type: OSVDB ID: 68712
Blue Coat ProxySG Active Content Transformation or Removal Feature JavaScript Detection Weakness Policy Rule Bypass

Source: XF
Type: UNKNOWN
proxysg-removal-security-bypass(62601)

Source: CCN
Type: Blue Coat Systems Web site
BlueTouch Online | Blue Coat Systems, Inc.

Source: CONFIRM
Type: UNKNOWN
https://kb.bluecoat.com/index?page=content&id=SA48

Source: CCN
Type: Blue Coat SA48
JavaScript detection improvements in active content transformation

Vulnerable Configuration:

Configuration 1:

cpe:/o:bluecoat:sgos:3.2.6:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.1.2.1:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.1.2:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.1.6:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.2:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.2.1:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.2.2:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.3:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.3.4:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.3.7:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.3.12:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.3.21:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.3.26:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.4.1:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.5:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.5.1:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.6:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.6.1:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.6.4:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:4.2.7.1:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:*:*:*:*:*:*:*:* (Version <= 4.3.4)

OR cpe:/o:bluecoat:sgos:5.2.2.4:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:5.4.5:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:5.5.4:*:*:*:*:*:*:*

OR cpe:/o:bluecoat:sgos:6.1.2:*:*:*:*:*:*:*

AND

cpe:/h:bluecoat:proxysg:*:*:*:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg210-10:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg210-10:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg210-25:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg210-25:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg210-5:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg210-5:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg510-10:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg510-10:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg510-20:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg510-20:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg510-25:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg510-25:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg510-5:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg810-10:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg810-10:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg810-20:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg810-20:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg810-25:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg810-25:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg810-5:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg9000-10:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg9000-10:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg9000-20:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg9000-20:-:-:full_proxy:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg9000-5:-:-:acceleration:*:*:*:*:*

OR cpe:/h:bluecoat:proxysg_sg9000-5:-:-:full_proxy:*:*:*:*:*

Configuration CCN 1:

cpe:/h:bluecoat:proxysg:6:*:*:*:*:*:*:*

Denotes that component is vulnerable