CVE Database
/

CVE-2004-2397

Back to search

CVE-2004-2397

Published: Aug 17, 2005

Modified: Aug 8, 2024

PUBLISHED

Description

The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates.

VendorProductVersions

n/a

n/a

affected
n/a

References

10371
vdb-entry
x_refsource_BID
11627
third-party-advisory
x_refsource_SECUNIA
bluecoat-sgos-key-plaintext(16182)
vdb-entry
x_refsource_XF
6218
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now