PT-2017-8996 · Blue Coat · Blue Coat Advanced Secure Gateway+2

Publicado 2017-06-08 · Atualizado 2017-06-24 · CVE-2016-6594

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Blue Coat Advanced Secure Gateway versions 6.6 Blue Coat CacheFlow versions 3.4 Blue Coat ProxySG versions 6.5 through 6.6

Description The issue allows remote attackers to bypass blocked requests, user authentication, and payload scanning.

Recommendations For Blue Coat Advanced Secure Gateway version 6.6, update to a version that includes a fix for this issue. For Blue Coat CacheFlow version 3.4, update to a version that includes a fix for this issue. For Blue Coat ProxySG versions 6.5 through 6.6, update to a version that includes a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2016-6594

Produtos afetados

Blue Coat Advanced Secure Gateway

Blue Coat Cacheflow

Blue Coat Proxysg

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-6594 · Aviso do Fabricante
• https://bto.bluecoat.com/security-advisory/sa130 · Aviso do Fabricante
• http://securityfocus.com/bid/91404 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-6594 · Nota de Segurança