PT-2017-9953 · Symantec · Symantec Advanced Secure Gateway+1

Publicado 2017-05-11 · Atualizado 2021-07-08 · CVE-2016-9099

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Symantec Advanced Secure Gateway (ASG) versions 6.6 through 6.7 prior to 6.7.2.1 ProxySG versions 6.5 prior to 6.5.10.6 ProxySG version 6.6 ProxySG versions 6.7 prior to 6.7.2.1

Description The issue allows a remote attacker to use a crafted management console URL in a phishing attack to redirect the target user to a malicious web site. This is achieved through an open redirection vulnerability.

Recommendations For Symantec Advanced Secure Gateway (ASG) versions 6.6 through 6.7 prior to 6.7.2.1, update to version 6.7.2.1 or later. For ProxySG versions 6.5 prior to 6.5.10.6, update to version 6.5.10.6 or later. For ProxySG version 6.6, update to version 6.7.2.1 or later. For ProxySG versions 6.7 prior to 6.7.2.1, update to version 6.7.2.1 or later.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2016-9099

Produtos afetados

Proxysg

Symantec Advanced Secure Gateway

Referências · 6

• http://securityfocus.com/bid/102455 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9099 · Nota de Segurança
• https://t.me/cvenotify/17267 · Publicação no Telegram
• http://securitytracker.com/id/1040138 · Nota
• https://osv.dev/vulnerability/CVE-2016-9099 · Aviso do Fabricante
• https://symantec.com/security-center/network-protection-security-advisories/SA155 · Aviso do Fabricante