CVE-2016-9097 - CVE House

Back to Database

Status published High CVE-2016-9097

The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8,...

7.2 CVSS

Vulnerability Description

The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 prior to 6.7.1.2 management consoles do not, under certain circumstances, correctly authorize administrator users. A malicious administrator with read-only access can exploit this vulnerability to access management console functionality that requires read-write access privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-9097

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Symantec Corporation

View All →

An information disclosure vulnerability in the Management Center (MC) REST...

Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be...

Norton Password Manager, prior to 6.5.0.2104, may be susceptible to...

Symantec My VIP portal, previous version which has already been...

An information disclosure vulnerability in Symantec Reporter web UI 10.3...

Affected Vendor

Symantec Corporation

View all reports →

Affected Software

Symantec Advanced Secure Gateway (ASG) and ProxySG

Vulnerable Versions:

ASG 6.6 prior to 6.6.5.8, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, ProxySG 6.7 prior to 6.7.1.2

Timeline

Official Publish: May 11th, 2017

Last Modified: September 16th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.