PT-2017-18035

Name of the Vulnerable Software and Affected Versions PowerSCADA Anywhere version 1.0 PowerSCADA Expert versions 8.1 through 8.2 Citect Anywhere version 1.0 Description A cross-site request forgery issue exists in the Secure Gateway component, allowing for multiple state-changing requests. This...

PT-2017-18036

Name of the Vulnerable Software and Affected Versions Schneider Electric PowerSCADA Anywhere version 1.0 Schneider Electric PowerSCADA Expert versions 8.1 through 8.2 Citect Anywhere version 1.0 Description A vulnerability exists that allows the ability to specify arbitrary server target nodes in...

Multiple Blue Coat Product Security Bypass Vulnerabilities

Blue Coat Advanced Secure Gateway, CacheFlow, and ProxySG are all products of Blue Coat Systems, Inc. Blue Coat Advanced Secure Gateway is a secure Web gateway appliance; CacheFlow is a network CacheFlow is a network gas pedal; ProxySG is a switch. A security vulnerability exists in Blue Coat...

CVE-2016-6594

The CVE-2016-6594 entry affects Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, and ProxySG 6.5/6.6. Description details a Security Control Bypass: when server hostname is unavailable, the products perform a reverse DNS (RDNS) lookup on the server IP to resolve a hostname. Depending on poli...

CVE-2016-6594: Undefined Security Weakness

Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass blocked requests, user authentication, and payload scanning...

PT-2017-8996

Name of the Vulnerable Software and Affected Versions Blue Coat Advanced Secure Gateway versions 6.6 Blue Coat CacheFlow versions 3.4 Blue Coat ProxySG versions 6.5 through 6.6 Description The issue allows remote attackers to bypass blocked requests, user authentication, and payload scanning...

SA150: NSS Vulnerability April 2017

SUMMARY Symantec Network Protection products using affected versions of NSS are susceptible to a security vulnerability. A remote attacker can send crafted Base64-encoded data and execute arbitrary code or cause denial of service through an application crash. AFFECTED PRODUCTS The following...

CVE-2016-9099

Symantec Advanced Secure Gateway ASG 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the...

CVE-2016-9100

Symantec Advanced Secure Gateway ASG 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible to an information disclosure vulnerability. An attacker with local access to the client host of an...

Open redirect

Symantec Advanced Secure Gateway ASG 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the...

CVE-2016-9099: URL Redirection to Untrusted Site

Symantec Advanced Secure Gateway ASG 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the...

PT-2017-9951

Name of the Vulnerable Software and Affected Versions Symantec Advanced Secure Gateway ASG versions 6.6 prior to 6.6.5.8 ProxySG versions 6.5 prior to 6.5.10.6 ProxySG versions 6.6 prior to 6.6.5.8 ProxySG versions 6.7 prior to 6.7.1.2 Description The management consoles of the affected software ...

PT-2017-9953

Name of the Vulnerable Software and Affected Versions Symantec Advanced Secure Gateway ASG versions 6.6 through 6.7 prior to 6.7.2.1 ProxySG versions 6.5 prior to 6.5.10.6 ProxySG version 6.6 ProxySG versions 6.7 prior to 6.7.2.1 Description The issue allows a remote attacker to use a crafted...

PT-2017-9954

Name of the Vulnerable Software and Affected Versions Symantec Advanced Secure Gateway ASG versions 6.6 prior to 6.6.5.13 Symantec Advanced Secure Gateway ASG versions 6.7 prior to 6.7.3.1 ProxySG versions 6.5 prior to 6.5.10.6 ProxySG versions 6.6 prior to 6.6.5.13 ProxySG versions 6.7 prior to...

CVE-2016-9097: Undefined Security Weakness

The Symantec Advanced Secure Gateway ASG 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 prior to 6.7.1.2 management consoles do not, under certain circumstances, correctly authorize administrator users. A malicious administrator with read-only acce...

CVE-2016-9100: Undefined Security Weakness

Symantec Advanced Secure Gateway ASG 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.13, and ProxySG 6.7 prior to 6.7.3.1 are susceptible to an information disclosure vulnerability. An attacker with local access to the client host of an...

CVE-2016-9091

Blue Coat Advanced Secure Gateway ASG 6.6 before 6.6.5.4 and Content Analysis System CAS 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges...

Command injection

Blue Coat Advanced Secure Gateway ASG 6.6 before 6.6.5.4 and Content Analysis System CAS 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges...

PT-2017-9945

Name of the Vulnerable Software and Affected Versions Blue Coat Advanced Secure Gateway ASG versions 6.6 through 6.6.5.3 Blue Coat Content Analysis System CAS versions 1.3 through 1.3.7.3 Description The issue allows an authenticated malicious administrator to execute arbitrary OS commands with...

Bluecoat ASG 6.6/CAS OS Command Injection Vulnerability Vulnerability

Blue Coat Advanced Secure Gateway ASG and Content Analysis System CAS are both products of Blue Coat Systems, Inc. ASG is a secure Web gateway appliance; CAS is a malware analysis system that integrates application whitelisting and dual anti-malware signature databases. CAS is a malware analysis...