CVE-2015-8597

moderate-risk
Published 2016-01-08

Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway (ASG) 6.6 might allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in conjunction with a "clear text" one in a coaching page, as demonstrated by "http://www.%humbug-URL%.local/bluecoat-splash-API?%BASE64-URL%."

Do I need to act?

-
0.25% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.4/10 High
NETWORK / LOW complexity

Affected Products (2)

Proxysg

Affected Vendors

Bluecoat

References (6)

Exploit http://knowitsecure.se/2015/12/18/knowit-secure-sakrar-bluecoat/
http://www.securitytracker.com/id/1034506
Vendor Advisory https://bto.bluecoat.com/security-advisory/sa107
Exploit http://knowitsecure.se/2015/12/18/knowit-secure-sakrar-bluecoat/
http://www.securitytracker.com/id/1034506
Vendor Advisory https://bto.bluecoat.com/security-advisory/sa107
34
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 1/34 · Minimal
Exposure 7/34 · Low