The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A remote attacker, with access to the appliance management interface, can hijack the session of a currently logged-in user and access the management console.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Advanced_secure_gateway | Broadcom | 6.7.4 (including) | 6.7.4.10 (excluding) |
| Advanced_secure_gateway | Broadcom | 7.1 (including) | 7.2.0.1 (excluding) |