Information disclosure in Bluecoat Sgos

CVE-2011-5126

Blue Coat ProxySG 6.1 before SGOS 6.1.5.1 and 6.2 before SGOS 6.2.2.1 writes the secure heap to core images, which allows context-dependent attackers to obtain sensitive authentication information by leveraging read access to a downloaded core file.

Vulnerability class: Information Disclosure

EPSS: 0.011 (61.1th percentile) — read the EPSS interpretation.

Affected products

  • Bluecoat Sgos — versions 6.1, 6.1.1.1, 6.1.2
  • N/a — versions n/a

Weakness classification (CWE)

References