CVE-2005-1708
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows...
CVE-2005-1708 is a medium vulnerability (CVSS 4.6) in Bluecoat Reporter, published May 24, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.17%, the 67th percentile. No source names a fixed version.
- Severity
- 4.6 MediumCVSS 2.0, NVD
- Exploit chance
- 1.17%EPSS, 67th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Blue Coat Reporter 7.0/7.1 - Privilege Escalation | 2005-05-24 |
What each source reports
NVD Score used
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
- Record
CVE-2005-1708- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
- Record
CVE-2005-1708- Updated
- 2026-11-02
EUVDEUVD-2005-1710No score
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
- Record
EUVD-2005-1710- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-97j5-6m35-hqwfNo score
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows...
templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
- Record
GHSA-97j5-6m35-hqwf- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/15452
marc.info?l=bugtraq&m=111695726810435&w=2
bluecoat.com/support/knowledge/advisory_reporter_711_vulnerabilities.html
osvdb.org/16763
securityfocus.com/bid/13723
vupen.com/english/advisories/2005/0589
nvd.nist.gov/vuln/detail/CVE-2005-1708
github.com/advisories/GHSA-97j5-6m35-hqwf