Blue Coat ProxyAV Multiple Cross Site Request Forgery Vulnerabilities

Bugtraq ID:	44385
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 22 2010 12:00AM
Updated:	Oct 22 2010 12:00AM
Credit:	The vendor reported these issues.
Vulnerable:	Blue Coat Systems ProxyAV 3.2.6.0 Blue Coat Systems ProxyAV 3.2
Not Vulnerable:	Blue Coat Systems ProxyAV 3.2.6.1

Blue Coat ProxyAV Multiple Cross Site Request Forgery Vulnerabilities

Blue Coat ProxyAV is prone to multiple unspecified cross-site request-forgery vulnerabilities.

Exploiting these issues may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application; other attacks are also possible.

Blue Coat ProxyAV versions prior to 3.2.6.1 are vulnerable.

Blue Coat ProxyAV Multiple Cross Site Request Forgery Vulnerabilities

To exploit these issues, an attacker must entice an unsuspecting victim to visit a malicious webpage.

Blue Coat ProxyAV Multiple Cross Site Request Forgery Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Blue Coat ProxyAV Multiple Cross Site Request Forgery Vulnerabilities

References:

• Product Homepage (Blue Coat)
  
• ProxyAV Cross Site Request Forgery vulnerability (Blue Coat)