Re: Blue Coat xss

[Tom Kelly <tom.kelly@xxxxxxxxxxxx>]

After getting more details from the original poster,
Blue Coat Systems has issued an advisory for this issue:

http://www.bluecoat.com/support/securityadvisories/icap_patience

Tom Kelly
tom.kelly@xxxxxxxxxxxx


jplopezy@xxxxxxxxx wrote:
> 
> There is a security issue in the blue coat.
> 
> The problem lies in the "Web Filter", which lets you execute an XSS.
> 
> This only affects the Internet Explorer browser. "
> 
> 
> 
> as a result, could jump the antivirus scan or make spoofing.
> 
> 
> 
> POC
> 
> 
> 
> http://www.example.com/file.exe?<script>(1)</script>
> 
> 
> 
> Juan Pablo Lopez Yacubian
>