Multiple Bluecoat Products CVE-2016-9091 Command Injection Vulnerability

Multiple Bluecoat Products are prone to command-injection vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary OS commands on the affected system with elevated system privileges. This may aid in further attacks.

The following products are affected:

Advanced Secure Gateway 6.6 prior to is vulnerable.
Content Analysis System 1.3 prior to is vulnerable.


Bugtraq ID: 97372
Class: Input Validation Error
CVE: CVE-2016-9091

Remote: Yes
Local: Yes
Published: Apr 03 2017 12:00AM
Credit: Peter Paccione, Chris Hebert, and Corey Boyd.
Vulnerable: Bluecoat Content Analysis System 1.3
Bluecoat Advanced Secure Gateway 6.6

Not Vulnerable: Bluecoat Content Analysis System
Bluecoat Advanced Secure Gateway


The following exploit is available:

Related Posts