ByteOS Network

NVD Vulnerability Details :

CVE-2012-2566

Deferred

Source-cret@cert.org

Published At-09 Jun, 2012 | 00:55

Updated At-11 Apr, 2025 | 00:51

Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS connection attempts, which allows remote attackers to bypass intended IP address and domain restrictions, and trigger misleading log entries, via a crafted header.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

bloxx>>web_filtering>>Versions up to 5.0.13(inclusive)

cpe:2.3:a:bloxx:web_filtering:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.kb.cert.org/vuls/id/722963	cret@cert.org	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8R9LBY	cret@cert.org	US Government Resource
http://www.securityfocus.com/bid/53715	cret@cert.org	N/A
http://www.kb.cert.org/vuls/id/722963	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8R9LBY	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.securityfocus.com/bid/53715	af854a3a-2127-422b-91ae-364da2661108	N/A