CVE-2014-2565 Command injection in n/a
Remote administrators can execute arbitrary commands on Blue Coat Content Analysis System via command injection in the commandline interface.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-2565?
CVE-2014-2565 is a medium-severity command injection vulnerability in n/a, published on 30 Apr 2014. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to "command injection."
Weakness: CWE-78
Which versions are affected by CVE-2014-2565?
It affects 2 products.
Products include Bluecoat Content Analysis System, Bluecoat Content Analysis System Software.
How do I fix CVE-2014-2565?
No fix has been published for CVE-2014-2565 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2014-2565 being exploited?
There is no known exploitation of CVE-2014-2565 in the wild and no public exploit code.
Sources
Also known as GHSA-x78h-6v2p-hwp2.