medium6.1
CVE-2016-9099
Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are suscepti…
Impact
Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the target user to a malicious web site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Advanced Secure Gateway | from 6.7 before 6.7.2.1 Version 6.6 |
| Broadcom | Symantec Proxysg | from 6.5 before 6.5.10.6 from 6.7 before 6.7.2.1 Version 6.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/102455
- http://www.securitytracker.com/id/1040138
- https://www.symantec.com/security-center/network-protection-security-advisories/SA155
- http://www.securityfocus.com/bid/102455
- http://www.securitytracker.com/id/1040138
- https://www.symantec.com/security-center/network-protection-security-advisories/SA155