CVE-2016-9099

MEDIUM

Symantec ASG/ProxySG <6.7.2.1, 6.5.10.6 - Open Redirect

Title source: llm

Description

Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the target user to a malicious web site.

References (3)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/102455

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1040138

[Vendor Advisory] https://www.symantec.com/security-center/network-protection-security-advisories/SA155

Scores

CVSS v3 6.1

EPSS 0.0031

EPSS Percentile 54.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (9)

broadcom/advanced_secure_gateway < 6.7.2.1

broadcom/symantec_proxysg < 6.5.10.6

broadcom/advanced_secure_gateway

broadcom/symantec_proxysg

Symantec Corporation/ASG < 6.6

Symantec Corporation/ASG < 6.7 prior to 6.7.2.1

Symantec Corporation/ProxySG < 6.5 prior to 6.5.10.6

Symantec Corporation/ProxySG < 6.6

Symantec Corporation/ProxySG < 6.7 prior to 6.7.2.1

Published May 11, 2017

Tracked Since Feb 18, 2026