CVE-2016-9091

Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
symantecCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
VendorProductVersion
bluecoatadvanced_secure_gateway
𝑥
≤ 6.6.5.2
bluecoatcontent_analysis_system_software
𝑥
≤ 1.3.7.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/97372
https://bto.bluecoat.com/security-advisory/sa138
https://www.exploit-db.com/exploits/41785/
https://www.exploit-db.com/exploits/41786/
http://www.securityfocus.com/bid/97372
https://bto.bluecoat.com/security-advisory/sa138
https://www.exploit-db.com/exploits/41785/
https://www.exploit-db.com/exploits/41786/