製品・ソフトウェアに関する情報

JVN脆弱性詳細

Blue Coat ProxySG のアクティブコンテンツの変換機能における JavaScript の検出を回避される脆弱性

Title	Blue Coat ProxySG のアクティブコンテンツの変換機能における JavaScript の検出を回避される脆弱性
Summary	Blue Coat ProxySG のアクティブコンテンツの変換機能には、JavaScript の検出を回避される脆弱性が存在します。
Possible impacts	第三者により、JavaScript の検出を回避される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 1, 2010, midnight
Registration Date	Sept. 3, 2012, 6:12 p.m.
Last Update	Sept. 3, 2012, 6:12 p.m.

CVSS2.0 : 警告
Score	5
Vector	AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected System

ブルーコートシステムズ

ProxySG

ProxySG (SGOS) 4.3.4.2 未満

ProxySG (SGOS) 5.4.5.1 未満の 5.x

ProxySG (SGOS) 5.5.4.1 未満の 5.5

ProxySG (SGOS) 6.1.2.1 未満の 6.x

ProxySG SG210-10

ProxySG SG210-25

ProxySG SG210-5

ProxySG SG510-10

ProxySG SG510-20

ProxySG SG510-25

ProxySG SG510-5

ProxySG SG810-10

ProxySG SG810-20

ProxySG SG810-25

ProxySG SG810-5

ProxySG SG9000-10

ProxySG SG9000-20

ProxySG SG9000-5

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-5190	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5190
National Vulnerability Database (NVD)
2	CVE-2010-5190	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-5190

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-264	https://jvndb.jvn.jp/ja/cwe/CWE-264.html

ベンダー情報

No	Name	URL
bluecoat
1	Top Page	http://www.bluecoat.de/support/contact.html
Security Advisories
2	SA48	https://kb.bluecoat.com/index?page=content&id=SA48

Change Log

No	Changed Details	Date of change
0	[2012年09月03日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2010-5190

Summary	The Active Content Transformation functionality in Blue Coat ProxySG before SGOS 4.3.4.2, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.2.1 allows remote attackers to bypass JavaScript detection via HTML entities.
Publication Date	Aug. 27, 2012, 4:55 a.m.
Registration Date	Jan. 29, 2021, 11:11 a.m.
Last Update	Nov. 21, 2024, 10:22 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:bluecoat:sgos::::::::		4.3.4
cpe:2.3:o:bluecoat:sgos:3.2.6:::::::*
cpe:2.3:o:bluecoat:sgos:4.1.2.1:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.1.2:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.1.6:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.2:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.2.1:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.2.2:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3.4:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3.7:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3.12:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3.21:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3.26:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.4.1:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.5:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.5.1:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.6:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.6.1:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.6.4:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.7.1:::::::*
cpe:2.3:o:bluecoat:sgos:5.2.2.4:::::::*
cpe:2.3:o:bluecoat:sgos:5.4.5:::::::*
cpe:2.3:o:bluecoat:sgos:5.5.4:::::::*
cpe:2.3:o:bluecoat:sgos:6.1.2:::::::*
cpe:2.3:h:bluecoat:proxysg::::::::
cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-5:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-5:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:full_proxy:::::*

Related information, measures and tools

No	URL	refsource	タグ
1	https://kb.bluecoat.com/index?page=content&id=SA48
2	https://kb.bluecoat.com/index?page=content&id=SA48

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-264	認可・権限・アクセス制御	https://cwe.mitre.org/data/definitions/264.html

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:bluecoat:sgos::::::::		4.3.4
cpe:2.3:o:bluecoat:sgos:3.2.6:::::::*
cpe:2.3:o:bluecoat:sgos:4.1.2.1:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.1.2:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.1.6:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.2:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.2.1:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.2.2:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3.4:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3.7:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3.12:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3.21:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.3.26:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.4.1:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.5:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.5.1:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.6:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.6.1:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.6.4:::::::*
cpe:2.3:o:bluecoat:sgos:4.2.7.1:::::::*
cpe:2.3:o:bluecoat:sgos:5.2.2.4:::::::*
cpe:2.3:o:bluecoat:sgos:5.4.5:::::::*
cpe:2.3:o:bluecoat:sgos:5.5.4:::::::*
cpe:2.3:o:bluecoat:sgos:6.1.2:::::::*
cpe:2.3:h:bluecoat:proxysg::::::::
cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg210-10:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg210-25:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg210-5:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-10:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-20:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-25:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg510-5:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-10:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-20:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-25:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg810-5:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-10:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:full_proxy:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-20:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:acceleration:::::*
cpe:2.3:h:bluecoat:proxysg_sg9000-5:-:-:full_proxy:::::*