CVE-2016-9100: High severity Broadcom Advanced Secure Gateway vulnerability
Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible to an information disclosure vulnerability. An attacker with local access to the client host of an authenticated administrator user can, under certain circumstances, obtain sensitive authentication credential information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9100?
CVE-2016-9100 is considered a medium severity vulnerability due to its potential for information disclosure.
How do I fix CVE-2016-9100?
To remediate CVE-2016-9100, update the Symantec Advanced Secure Gateway or ProxySG to the latest version as specified in the security advisory.
What systems are affected by CVE-2016-9100?
CVE-2016-9100 affects Broadcom Symantec Advanced Secure Gateway versions prior to 6.6.5.13 and 6.7.3.1, as well as ProxySG versions prior to 6.5.10.6, 6.6.5.13, and 6.7.3.1.
What kind of attack does CVE-2016-9100 facilitate?
CVE-2016-9100 facilitates information disclosure attacks by allowing unauthorized access to sensitive information on the system.
Is CVE-2016-9100 remotely exploitable?
CVE-2016-9100 requires local access to the client host, making it not remotely exploitable.