CVE-2010-5191

Published: Aug 26, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities on the Blue Coat ProxyAV appliance before 3.2.6.1 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password, (2) modify a policy, or (3) restart the device.

Affected (4)

Products: Bluecoat: Avos, Proxyav

2 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Bluecoat Avos	Up to 3.2.6
Bluecoat Avos	Version 3.1
Bluecoat Avos	Version 3.2
Bluecoat Proxyav	All versions

Related CWEs

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

https://kb.bluecoat.com/index?page=content&id=SA46

Source: cve@mitre.org

https://kb.bluecoat.com/index?page=content&id=SA46

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.