CVE-2016-9099: Medium severity Broadcom Advanced Secure Gateway vulnerability
Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the target user to a malicious web site.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9099?
CVE-2016-9099 is classified as a medium severity vulnerability due to its potential for exploitation in phishing attacks.
How do I fix CVE-2016-9099?
To fix CVE-2016-9099, upgrade to Symantec Advanced Secure Gateway version 6.7.2.1 or later, or ProxySG version 6.5.10.6 or later.
What are the affected versions for CVE-2016-9099?
CVE-2016-9099 affects Symantec Advanced Secure Gateway versions prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, and both ProxySG 6.6 and 6.7 prior to 6.7.2.1.
Can CVE-2016-9099 be exploited remotely?
Yes, CVE-2016-9099 can be exploited remotely through a crafted management console URL in a phishing attack.
What type of vulnerability is CVE-2016-9099?
CVE-2016-9099 is classified as an open redirection vulnerability.