Arbitrary Privilege Escalation in Blue Coat Reporter 7.1.2

Arbitrary Privilege Escalation in Blue Coat Reporter 7.1.2

CVE-2005-1708 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.

Learn more about our User Device Pen Test.