Executive Summary

Informations
Name CVE-2004-2397 First vendor Publication 2004-12-31
Vendor Cve Last vendor Modification 2024-02-13

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Overall CVSS Score 7.5
Base Score 7.5 Environmental Score 7.5
impact SubScore 3.6 Temporal Score 7.5
Exploitabality Sub Score 3.9
 
Attack Vector Network Attack Complexity Low
Privileges Required None User Interaction None
Scope Unchanged Confidentiality Impact High
Integrity Impact None Availability Impact None
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score 5 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2397

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-312 Cleartext Storage of Sensitive Information

CPE : Common Platform Enumeration

TypeDescriptionCount
Os 1

Open Source Vulnerability Database (OSVDB)

Id Description
6218 Blue Coat Security Gateway Private Key Disclosure

Blue Coat Security Gateway OS contains a flaw that may lead to an unauthorized information disclosure.  The problem is that the private key and its pass-phrase will be logged in cleartext on an affected device when importing it via the web-based management console, which will disclose private keys associated with imported certificates resulting in a loss of confidentiality.

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/10371
CONFIRM http://www.bluecoat.com/support/knowledge/advisory_private_key_compromise.html
OSVDB http://www.osvdb.org/6218
SECUNIA http://secunia.com/advisories/11627
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/16182

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
Date Informations
2024-02-13 21:27:58
  • Multiple Updates
2021-05-04 12:02:37
  • Multiple Updates
2021-04-22 01:02:49
  • Multiple Updates
2020-05-23 00:16:10
  • Multiple Updates
2017-07-11 12:01:44
  • Multiple Updates
2016-06-28 15:11:08
  • Multiple Updates
2016-04-26 13:09:10
  • Multiple Updates
2013-05-11 11:48:49
  • Multiple Updates