CVE-2016-9100 Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible t...
HighCVSS 7.8
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible to an information disclosure vulnerability. An attacker with local access to the client host of an authenticated administrator user can, under certain circumstances, obtain sensitive authentication credential information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom advanced secure gateway | >= 6.6, < 6.6.5.13 | 6.6.5.13 |
| broadcom advanced secure gateway | >= 6.7, < 6.7.3.1 | 6.7.3.1 |
| broadcom symantec proxysg | >= 6.5, < 6.5.10.6 | 6.5.10.6 |
| broadcom symantec proxysg | >= 6.6, < 6.6.5.13 | 6.6.5.13 |
| broadcom symantec proxysg | >= 6.7, < 6.7.3.1 | 6.7.3.1 |
| symantec ASG | = 6.6 prior to 6.6.5.13 | No fix listed |
| symantec ASG | = 6.7 prior to 6.7.3.1 | No fix listed |
| symantec ProxySG | = 6.5 prior to 6.5.10.6 | No fix listed |
| symantec ProxySG | = 6.6 prior to 6.6.5.13 | No fix listed |
| symantec ProxySG | = 6.7 prior to 6.7.3.1 | No fix listed |
References
- 102454 third-party-advisory vdb-entry
- 1040138 third-party-advisory vdb-entry
- www.symantec.com vendor-advisory