CVE-2016-9091

N/A

Description

Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges.

CVE Details

CVSS v3.1 ScoreN/A

Published4/5/2017

Last Modified4/20/2025

Sourcenvd

Honeypot Sightings0

Affected Products

bluecoat:advanced_secure_gatewaybluecoat:content_analysis_system_software

Weaknesses (CWE)

CWE-78

References

http://www.securityfocus.com/bid/97372(secure@symantec.com)

https://bto.bluecoat.com/security-advisory/sa138(secure@symantec.com)

https://www.exploit-db.com/exploits/41785/(secure@symantec.com)

https://www.exploit-db.com/exploits/41786/(secure@symantec.com)

http://www.securityfocus.com/bid/97372(af854a3a-2127-422b-91ae-364da2661108)

https://bto.bluecoat.com/security-advisory/sa138(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploit-db.com/exploits/41785/(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploit-db.com/exploits/41786/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.