advanced secure gateway vulnerabilities and fixes

Recent CVEs affecting advanced secure gateway, with upgrade or downgrade steps. 19 tracked.

Also searched as: advancedsecuregateway.

advanced secure gateway has 19 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 15. Most recent: 2023-06-01. Highest priority: CVE-2018-5241 (score 62/100).

• CVE-2023-23955 HIGH 8.1 UPGRADE UPGRADE Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Server-Side
• CVE-2023-23954 MEDIUM 5.4 UPGRADE UPGRADE Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cros
• CVE-2023-23953 HIGH 7.8 UPGRADE UPGRADE Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation
• CVE-2023-23952 CRITICAL 9.8 UPGRADE UPGRADE Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Inj
• CVE-2021-46825 CRITICAL 9.1 DOWNGRADE DOWNGRADE Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability
• CVE-2019-18375 MEDIUM 6.5 UPGRADE UPGRADE The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability
• CVE-2018-5241 CRITICAL 9.8 DOWNGRADE DOWNGRADE Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML au
• CVE-2018-18371 MEDIUM 6.5 UPGRADE UPGRADE The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server
• CVE-2018-18370 MEDIUM 6.1 UPGRADE UPGRADE The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server
• CVE-2017-13678 MEDIUM 4.8 UPGRADE UPGRADE Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles
• CVE-2017-13677 HIGH 7.5 UPGRADE UPGRADE Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management con
• CVE-2016-9100 HIGH 7.8 UPGRADE UPGRADE Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6
• CVE-2016-9099 MEDIUM 6.1 UPGRADE UPGRADE Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6
• CVE-2016-9097 HIGH 7.2 DOWNGRADE DOWNGRADE The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior
• CVE-2016-9091 HIGH 7.2 UPGRADE UPGRADE Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.
• CVE-2016-6594 HIGH 7.5 DOWNGRADE DOWNGRADE Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass bl
• CVE-2016-10258 MEDIUM 6.8 UPGRADE UPGRADE Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management co
• CVE-2016-10257 MEDIUM 6.1 UPGRADE UPGRADE The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), P
• CVE-2015-8597 HIGH 7.4 UPGRADE DOWNGRADE Open redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure Gateway (ASG)

FAQ

How do I fix advanced secure gateway vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is advanced secure gateway being exploited right now?

None of the tracked advanced secure gateway CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which advanced secure gateway CVE should I patch first?

CVE-2018-5241 currently ranks highest (62/100): Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML au.

RSS feed for advanced secure gateway · ← Back to latest CVEs