In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.
oryginał ENCVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSophos Web Appliance
APPSophos≤ 4.3.1.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Command Injection
CWE
Referencje
Powiązane podatności
CVE-2023-1671CRITICAL9.8⚠ KEVten sam produkt
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than vers...
CVE-2022-4934HIGH7.2ten sam produkt
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version...
CVE-2017-6412HIGH8.1ten sam produkt
In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.
CVE-2017-6183HIGH7.2ten sam produkt
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (a...
CVE-2016-9554HIGH7.2ten sam produkt
The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Comman...