CVE-2005-1708
CVE-2005-1708 is a medium-severity vulnerability in Bluecoat Reporter with a CVSS 2.0 base score of 4.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 4.6)
- EPSS exploit prediction: 1% (64th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Bluecoat Reporter
- Published:
- Last modified:
Description
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
Frequently asked questions
- What is CVE-2005-1708?
- templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
- How severe is CVE-2005-1708?
- CVE-2005-1708 has a CVSS 2.0 base score of 4.6, rated medium severity.
- Is CVE-2005-1708 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (64th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-1708?
- CVE-2005-1708 affects Bluecoat Reporter. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2005-1708?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2005-1708 published?
- CVE-2005-1708 was published on 2005-05-24 and last updated on 2026-06-16.
References
- http://marc.info/?l=bugtraq&m=111695726810435&w=2
- http://secunia.com/advisories/15452
- http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html
- http://www.osvdb.org/16763
- http://www.securityfocus.com/bid/13723
- http://www.vupen.com/english/advisories/2005/0589
Affected products (1)
- cpe:2.3:a:bluecoat:reporter:*:*:*:*:*:*:*:*
More vulnerabilities in Bluecoat Reporter
- CVE-2011-5127 — Critical (CVSS 10.0): Directory traversal vulnerability in Blue Coat Reporter 9.x before 9.2.4.13, 9.2.5.x before 9.2.5.1, and 9.3 before…
- CVE-2005-1709 — High (CVSS 7.5): Unknown vulnerability in Blue Coat Reporter before 7.1.2 allows remote unauthenticated attackers to add a license.
- CVE-2005-1710 — Medium (CVSS 4.3): Multiple cross-site scripting (XSS) vulnerabilities in Blue Coat Reporter before 7.1.2 allow remote attackers to inject…