CVE-2016-9099 Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability....
MediumCVSS 6.1
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the target user to a malicious web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom advanced secure gateway | >= 6.7, < 6.7.2.1 | 6.7.2.1 |
| broadcom advanced secure gateway | = 6.6 | No fix listed |
| broadcom symantec proxysg | >= 6.5, < 6.5.10.6 | 6.5.10.6 |
| broadcom symantec proxysg | = 6.6 | No fix listed |
| broadcom symantec proxysg | >= 6.7, < 6.7.2.1 | 6.7.2.1 |
| symantec ASG | = 6.6 | No fix listed |
| symantec ASG | = 6.7 prior to 6.7.2.1 | No fix listed |
| symantec ProxySG | = 6.5 prior to 6.5.10.6 | No fix listed |
| symantec ProxySG | = 6.6 | No fix listed |
| symantec ProxySG | = 6.7 prior to 6.7.2.1 | No fix listed |
References
- 102455 third-party-advisory vdb-entry
- 1040138 third-party-advisory vdb-entry
- www.symantec.com vendor-advisory