Unrated severityNVD Advisory· Published May 30, 2015· Updated Jun 17, 2026
CVE-2015-4138
CVE-2015-4138
Description
The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not include the HTTPOnly flag in a Set-Cookie header for the administrator's cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, a different vulnerability than CVE-2015-2855.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:o:blue_coat:ssl_visibility_appliance_sv1800_firmware:*:*:*:*:*:*:*:*Range: <=3.8.3
- cpe:2.3:o:blue_coat:ssl_visibility_appliance_sv2800_firmware:*:*:*:*:*:*:*:*Range: <=3.8.3
- cpe:2.3:o:blue_coat:ssl_visibility_appliance_sv3800_firmware:*:*:*:*:*:*:*:*Range: <=3.8.3
cpe:2.3:o:blue_coat:ssl_visibility_appliance_sv800_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:blue_coat:ssl_visibility_appliance_sv800_firmware:*:*:*:*:*:*:*:*range: <=3.8.3
- (no CPE)range: <3.8.4
Patches
Vulnerability mechanics
References
2- www.kb.cert.org/vuls/id/498348nvdThird Party AdvisoryUS Government Resource
- bto.bluecoat.com/security-advisory/sa96nvdVendor Advisory
News mentions
0No linked articles in our index yet.