SA155: Multiple ASG and ProxySG Vulnerabilities

SUMMARY The Symantec ASG and ProxySG management consoles are susceptible to multiple vulnerabilities. A remote attacker can, under certain circumstances, obtain sensitive authentication credential information, redirect target users to malicious sites, and inject arbitrary JavaScript code into the...

CVE-2016-9099

CVE-2016-9099 is an open redirect vulnerability affecting Symantec ASG/ProxySG: ASG 6.6, ASG 6.7 before 6.7.2.1, ProxySG 6.5 before 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 before 6.7.2.1. An attacker can use a crafted management console URL in a phishing scenario to redirect users to a malicious s...