Oliver Karow has reported some vulnerabilities in Blue Coat Reporter, which can be exploited by to conduct cross-site scripting and script insertion attacks, bypass certain security restrictions, or gain escalated privileges.

1) An error allows a malicious user to create an administrative user account by sending a specially crafted POST request.

2) An unspecified error allows an unprivileged user to add a license.

3) Input passed as a username in the "Add User" window is not properly sanitised before being used. This can be exploited by administrative users to conduct script insertion attacks.

4) Input passed as a license key in the "Licensing" page is not properly sanitised before being returned to users. This can be exploited to conduct cross-site scripting attacks.

Solution
The vulnerabilities have been fixed in version 7.1.2 (ETA 2005-05-27).

Provided and/or discovered by
Oliver Karow

Changelog
Further details available in Customer Area

Original Advisory
Blue Coat Systems:
http://www.bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html

Oliver Karow:
http://www.oliverkarow.de/research/bluecoat.txt

Deep Links
Links available in Customer Area