CVE-2015-8482 Missing authorization in n/a
Local administrators can bypass security controls and disable the agent by modifying configuration files in local enforcement mode.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-8482?
CVE-2015-8482 is a low-severity missing authorization vulnerability in n/a, published on 7 Dec 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Blue Coat Unified Agent before 4.6.2 does not prevent modification of its configuration files when running in local enforcement mode, which allows local administrators to unblock categories or disable the agent via unspecified vectors.
Weakness: CWE-264
Which versions are affected by CVE-2015-8482?
It affects 1 product.
Products include Bluecoat Unified Agent.
How do I fix CVE-2015-8482?
No fix has been published for CVE-2015-8482 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2015-8482 being exploited?
There is no known exploitation of CVE-2015-8482 in the wild and no public exploit code.
Sources
Also known as GHSA-cv46-x7v4-jf2h.