CVE-2016-9091 - Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability

Back Back to CVE browser

HIGH

Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability

Published Apr 5, 2017

7.2

HIGH

CVSS 3.0

EPSS 10.13%

Description

Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges.

Affected products

Vendor Symantec Corporation Product Blue Coat ASG Default
n/a
- Version
  6.6 prior to 6.6.5.4
  Status
  affected
  Constraints
  -
Vendor Symantec Corporation Product Blue Coat CAS Default
n/a
- Version
  1.3 prior to 1.3.7.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Symantec Corporation

Blue Coat ASG

n/a

Version	Status	Constraints
6.6 prior to 6.6.5.4	affected	-

Symantec Corporation

Blue Coat CAS

n/a

Version	Status	Constraints
1.3 prior to 1.3.7.4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (4)

http://www.securityfocus.com/bid/97372
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bto.bluecoat.com/security-advisory/sa138
x_refsource_CONFIRMMitigationVendor Advisory
https://www.exploit-db.com/exploits/41785/
exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/41786/
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.securityfocus.com/bid/97372		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bto.bluecoat.com/security-advisory/sa138		x_refsource_CONFIRMMitigationVendor Advisory
https://www.exploit-db.com/exploits/41785/		exploitx_refsource_EXPLOIT-DB
https://www.exploit-db.com/exploits/41786/		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner symantec

Published Apr 5, 2017

Updated Aug 6, 2024

Reserved Oct 28, 2016

Link CVE-2016-9091

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2016-9091

Red Hat

Severity n/a

Public date n/a

Links CVE-2016-9091