CVE-2016-9091

Опубликовано: 05 апр. 2017

Источник: nvd

CVSS3: 7.2

CVSS2: 9

EPSS Средний

Описание

Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges.

Ссылки

http://www.securityfocus.com/bid/97372
Third Party Advisory
VDB Entry
https://bto.bluecoat.com/security-advisory/sa138
Mitigation
Vendor Advisory
https://www.exploit-db.com/exploits/41785/
https://www.exploit-db.com/exploits/41786/
http://www.securityfocus.com/bid/97372
Third Party Advisory
VDB Entry
https://bto.bluecoat.com/security-advisory/sa138
Mitigation
Vendor Advisory
https://www.exploit-db.com/exploits/41785/
https://www.exploit-db.com/exploits/41786/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:bluecoat:advanced_secure_gateway:*:*:*:*:*:*:*:*

Версия до 6.6.5.2 (включая)

cpe:2.3:a:bluecoat:content_analysis_system_software:*:*:*:*:*:*:*:*

Версия до 1.3.7.3 (включая)

EPSS

Процентиль: 97%

0.36512

Средний

7.2 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-mgjw-ppjc-jj5p