high7.8
CVE-2016-9100
Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and Proxy…
Impact
Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible to an information disclosure vulnerability. An attacker with local access to the client host of an authenticated administrator user can, under certain circumstances, obtain sensitive authentication credential information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Advanced Secure Gateway | from 6.6 before 6.6.5.13 from 6.7 before 6.7.3.1 |
| Broadcom | Symantec Proxysg | from 6.5 before 6.5.10.6 from 6.6 before 6.6.5.13 from 6.7 before 6.7.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/102454
- http://www.securitytracker.com/id/1040138
- https://www.symantec.com/security-center/network-protection-security-advisories/SA155
- http://www.securityfocus.com/bid/102454
- http://www.securitytracker.com/id/1040138
- https://www.symantec.com/security-center/network-protection-security-advisories/SA155