CVE-2015-8482

{"id": "CVE-2015-8482", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-12-07T20:59:18.520", "references": [{"url": "https://bto.bluecoat.com/security-advisory/sa102", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Blue Coat Unified Agent before 4.6.2 does not prevent modification of its configuration files when running in local enforcement mode, which allows local administrators to unblock categories or disable the agent via unspecified vectors."}, {"lang": "es", "value": "Blue Coat Unified Agent en versiones anteriores a 4.6.2 no impide la modificaci\u00f3n de sus archivos de configuraci\u00f3n cuando se ejecuta en modo local enforcement, lo que permite a administradores locales desbloquear categor\u00edas o deshabilitar el agente a trav\u00e9s de vectores no especificados."}], "lastModified": "2015-12-08T20:46:43.607", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bluecoat:unified_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83E17A63-E47D-4CAB-91F9-8EEF32236B7A", "versionEndIncluding": "4.6.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}