{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000099.html",
  "dc:date": "2017-05-31T19:27+09:00",
  "dcterms:issued": "2017-05-24T14:41+09:00",
  "dcterms:modified": "2017-05-31T19:27+09:00",
  "description": "SSL Visibility Appliance provided by Blue Coat Systems, Inc. is used as a transparent proxy for encrypted traffic management.\r\nIt is reported that the appliance generates RST packets with incorrect sequence numbers when it receives HTTPS requests from certain web browsers. When the web server behind the appliance fails to treat these incorrect RST packets, it keeps the encrypted session indefinitely.\r\nThis behavior may be used to cause a denial-of-service (DoS) condition on the server side.\r\nAccording to the developer, this issue does not affect the appliance.\r\n\r\nNTT-ME CORPORATION Cyber Security Center reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000099.html",
  "sec:cpe": {
    "#text": "cpe:/a:bluecoat:ssl_visibility_appliance",
    "@product": "SSL Visibility Appliance",
    "@vendor": "Blue Coat Systems, Inc.",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "5.0",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "7.2",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2017-000099",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN91438377/index.html",
      "@id": "JVN#91438377",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10259",
      "@id": "CVE-2016-10259",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2016-10259",
      "@id": "CVE-2016-10259",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "SSL Visibility Appliance may generate illegal RST packets"
}