CVE-2014-2033: The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2...

Security readout for executives and security teams

Blue Coat ProxySG could temporarily keep trusting credentials after an account is deleted or changed. A user who previously had valid credentials may bypass intended access restrictions during that window. This matters most for offboarding, privileged role changes, and environments relying on ProxySG to enforce web access policy. Exposure is limited to organizations running affected Blue Coat ProxySG SGOS versions with caching enabled and access decisions tied to user account status. The attacker must have had valid credentials before deletion or modification. Treat as a targeted access-control risk, not an internet-wide emergency. Prioritize remediation where ProxySG protects sensitive browsing, partner access, or offboarding workflows. Mitigation focus: Inventory ProxySG appliances and record SGOS versions.; Check Blue Coat SA77 for the supported fixed release or workaround.; Upgrade affected SGOS versions according to vendor guidance..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.