CVEvulnerability
CVE-2016-9091
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-04-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges.
Affected configurations
• bluecoat advanced secure gateway (<= 6.6.5.2)
• bluecoat content analysis system software (<= 1.3.7.3)
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://www.securityfocus.com/bid/97372 Third Party Advisory, VDB Entry
- https://bto.bluecoat.com/security-advisory/sa138 Mitigation, Vendor Advisory
- https://www.exploit-db.com/exploits/41785/ www.exploit-db.com
- https://www.exploit-db.com/exploits/41786/ www.exploit-db.com
- http://www.securityfocus.com/bid/97372 Third Party Advisory, VDB Entry
- https://bto.bluecoat.com/security-advisory/sa138 Mitigation, Vendor Advisory
- https://www.exploit-db.com/exploits/41785/ www.exploit-db.com
- https://www.exploit-db.com/exploits/41786/ www.exploit-db.com