CVEvulnerability
CVE-2016-9097
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-05-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 8.0 HIGH — AV:N/AC:L/Au:S/C:P/I:P/A:C
- Weaknesses
- CWE-264
Description
The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 prior to 6.7.1.2 management consoles do not, under certain circumstances, correctly authorize administrator users. A malicious administrator with read-only access can exploit this vulnerability to access management console functionality that requires read-write access privileges.
Affected configurations
• broadcom advanced secure gateway 6.6
• broadcom advanced secure gateway 6.6.3
• broadcom advanced secure gateway 6.6.4
• broadcom advanced secure gateway 6.6.4.3
• broadcom advanced secure gateway 6.6.5.1
• broadcom symantec proxysg 6.5
• broadcom symantec proxysg 6.5.1
• broadcom symantec proxysg 6.5.2
• broadcom symantec proxysg 6.5.2.10
• broadcom symantec proxysg 6.5.4.1
• broadcom symantec proxysg 6.5.5.7
• broadcom symantec proxysg 6.5.6.1
• broadcom symantec proxysg 6.5.7.6
• broadcom symantec proxysg 6.5.9.2
• broadcom symantec proxysg 6.5.9.8
• broadcom symantec proxysg 6.5.9.10
• broadcom symantec proxysg 6.5.9.14
• broadcom symantec proxysg 6.6
• broadcom symantec proxysg 6.6.2
• broadcom symantec proxysg 6.6.2.1
• broadcom symantec proxysg 6.6.2.2
• broadcom symantec proxysg 6.6.3
• broadcom symantec proxysg 6.6.3.2
• broadcom symantec proxysg 6.6.4
• broadcom symantec proxysg 6.6.4.1
• broadcom symantec proxysg 6.6.4.3
• broadcom symantec proxysg 6.6.5
• broadcom symantec proxysg 6.7
• broadcom symantec proxysg 6.7.1.1
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/101530 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039701 Third Party Advisory, VDB Entry
- https://www.symantec.com/security-center/network-protection-security-advisories/SA146 Vendor Advisory
- http://www.securityfocus.com/bid/101530 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039701 Third Party Advisory, VDB Entry
- https://www.symantec.com/security-center/network-protection-security-advisories/SA146 Vendor Advisory