Blue Coat products that include vulnerable versions of OpenSSH and enable X11 forwarding are susceptible to a command injection vulnerability due to insufficient input data sanitization. An authenticated remote attacker can exploit this vulnerability to bypass intended command restrictions enforced by a restricted shell or the target's SSH configuration. The attacker can also execute arbitrary commands.
To confirm ProxySG is not vulnerable to OpenSSH Command Injection Vulnerability. For complete details please refer to https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/0/0/symsa1361
