In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.
CVSS Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HSophos Web Appliance
APPSophos≤ 4.3.1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References
Related vulnerabilities
CVE-2023-1671CRITICAL9.8⚠ KEVten sam produkt
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than vers...
CVE-2017-6182CRITICAL9.8ten sam produkt
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating ...
CVE-2022-4934HIGH7.2ten sam produkt
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version...
CVE-2017-6183HIGH7.2ten sam produkt
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (a...
CVE-2016-9554HIGH7.2ten sam produkt
The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Comman...