Re: Blue Coat xss
After getting more details from the original poster,
Blue Coat Systems has issued an advisory for this issue:
http://www.bluecoat.com/support/securityadvisories/icap_patience
Tom Kelly
tom.kelly@xxxxxxxxxxxx
jplopezy@xxxxxxxxx wrote:
>
> There is a security issue in the blue coat.
>
> The problem lies in the "Web Filter", which lets you execute an XSS.
>
> This only affects the Internet Explorer browser. "
>
>
>
> as a result, could jump the antivirus scan or make spoofing.
>
>
>
> POC
>
>
>
> http://www.example.com/file.exe?<script>(1)</script>
>
>
>
> Juan Pablo Lopez Yacubian
>