CVE-2016-9097

CVE-2016-9097 describes an authorization bypass vulnerability in Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. Specifically, versions prior to 6.6.5.8 (ASG 6.6, ProxySG 6.6), 6.5.10.6 (ProxySG 6.5), and 6.7.1.2 (ProxySG 6.7) are affected. A malicious administrator with read-only access can exploit this to gain read-write privileges within the management console. This vulnerability is rated as High severity (CVSS 7.2) due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impact. It requires high privileges to initiate the attack. There is no evidence of active exploitation, nor is public exploit code available (Metasploit, Nuclei, ExploitDB). Community discussion and media coverage for this CVE are minimal, indicating low public attention.