Blue Coat ProxySG CVE-2014-2033 Security Bypass Vulnerability

Bugtraq ID:	66054
Class:	Design Error
CVE:	CVE-2014-2033
Remote:	Yes
Local:	No
Published:	Feb 25 2014 12:00AM
Updated:	Feb 25 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Blue Coat Systems ProxySG 6.5 Blue Coat Systems ProxySG 6.4 Blue Coat Systems ProxySG 6.3 Blue Coat Systems ProxySG 6.2 Blue Coat Systems ProxySG 6.1 Blue Coat Systems ProxySG 5.5 Blue Coat Systems ProxySG 5.4
Not Vulnerable:	Blue Coat Systems ProxySG 6.5.4 Blue Coat Systems ProxySG 5.5.11 3 Blue Coat Systems ProxySG 6.4.6.1 Blue Coat Systems ProxySG 6.2.15.3 Blue Coat Systems ProxySG 6.1.6.3

Blue Coat ProxySG CVE-2014-2033 Security Bypass Vulnerability

Blue Coat ProxySG is prone to a security-bypass vulnerability.

An attacker may bypass certain security restrictions and gain access to the user accounts.

Blue Coat ProxySG CVE-2014-2033 Security Bypass Vulnerability

Attacker can exploit this issue using readily available tools.

Blue Coat ProxySG CVE-2014-2033 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Blue Coat ProxySG CVE-2014-2033 Security Bypass Vulnerability

References:

• Blue Coat ProxySG product page (Blue Coat)
  
• February 18, 2014 �?? Changes to ProxySG local users are delayed (Blue Coat)
  
• Vulnerability Note VU#221620 Blue Coat ProxySG local user changes contain a time (CERT)