CVE-2016-9100
First published: Thu May 11 2017(Updated: )
Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible to an information disclosure vulnerability. An attacker with local access to the client host of an authenticated administrator user can, under certain circumstances, obtain sensitive authentication credential information.
Credit: secure@symantec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Broadcom Symantec Advanced Secure Gateway | >=6.6<6.6.5.13 | |
| Broadcom Symantec Advanced Secure Gateway | >=6.7<6.7.3.1 | |
| Broadcom ProxySG | >=6.5<6.5.10.6 | |
| Broadcom ProxySG | >=6.6<6.6.5.13 | |
| Broadcom ProxySG | >=6.7<6.7.3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-9100?
CVE-2016-9100 is considered a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2016-9100?
To remediate CVE-2016-9100, update the Symantec Advanced Secure Gateway or ProxySG to the latest version as specified in the security advisory.
What systems are affected by CVE-2016-9100?
CVE-2016-9100 affects Broadcom Symantec Advanced Secure Gateway versions prior to 6.6.5.13 and 6.7.3.1, as well as ProxySG versions prior to 6.5.10.6, 6.6.5.13, and 6.7.3.1.
What kind of attack does CVE-2016-9100 facilitate?
CVE-2016-9100 facilitates information disclosure attacks by allowing unauthorized access to sensitive information on the system.
Is CVE-2016-9100 remotely exploitable?
CVE-2016-9100 requires local access to the client host, making it not remotely exploitable.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/broadcom
- canonical/broadcom symantec advanced secure gateway
- version/broadcom symantec advanced secure gateway/6.6
- version/broadcom symantec advanced secure gateway/6.7
- canonical/broadcom proxysg
- version/broadcom proxysg/6.5
- version/broadcom proxysg/6.6
- version/broadcom proxysg/6.7