The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via vectors involving an IFRAME element.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: certcc

Published: 2015-05-30T19:00:00

Updated: 2024-08-06T05:24:39.035Z

Reserved: 2015-04-03T00:00:00

Link: CVE-2015-2854

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-05-30T19:59:07.083

Modified: 2024-11-21T02:28:12.787

Link: CVE-2015-2854

cve-icon Redhat

No data.