PT-2017-8996 · Blue Coat · Blue Coat Advanced Secure Gateway+2

Published 2017-06-08 · Updated 2017-06-24 · CVE-2016-6594

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Blue Coat Advanced Secure Gateway versions 6.6 Blue Coat CacheFlow versions 3.4 Blue Coat ProxySG versions 6.5 through 6.6

Description The issue allows remote attackers to bypass blocked requests, user authentication, and payload scanning.

Recommendations For Blue Coat Advanced Secure Gateway version 6.6, update to a version that includes a fix for this issue. For Blue Coat CacheFlow version 3.4, update to a version that includes a fix for this issue. For Blue Coat ProxySG versions 6.5 through 6.6, update to a version that includes a fix for this issue.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2016-6594

Affected Products

Blue Coat Advanced Secure Gateway

Blue Coat Cacheflow

Blue Coat Proxysg

References · 4

• https://osv.dev/vulnerability/CVE-2016-6594 · Vendor Advisory
• https://bto.bluecoat.com/security-advisory/sa130 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6594 · Security Note
• http://securityfocus.com/bid/91404 · Note