CVEvulnerability
CVE-2016-9100
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-05-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible to an information disclosure vulnerability. An attacker with local access to the client host of an authenticated administrator user can, under certain circumstances, obtain sensitive authentication credential information.
Affected configurations
• broadcom advanced secure gateway (>= 6.6 < 6.6.5.13)
• broadcom advanced secure gateway (>= 6.7 < 6.7.3.1)
• broadcom symantec proxysg (>= 6.5 < 6.5.10.6)
• broadcom symantec proxysg (>= 6.6 < 6.6.5.13)
• broadcom symantec proxysg (>= 6.7 < 6.7.3.1)
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/102454 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040138 Third Party Advisory, VDB Entry
- https://www.symantec.com/security-center/network-protection-security-advisories/SA155 Vendor Advisory
- http://www.securityfocus.com/bid/102454 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040138 Third Party Advisory, VDB Entry
- https://www.symantec.com/security-center/network-protection-security-advisories/SA155 Vendor Advisory