CVE-2016-7442

The CVE-2016-7442 entry concerns Sophos UTM, specifically the Frontend component. Firmware 9.405-5 and earlier expose an information-disclosure vulnerability by allowing local administrators to read the password value from the proxy user settings in System Settings / Scan Settings / Anti Spam. Af...

Sophos UTM 9.405-5 / 9.404-5 Information Disclosure Vulnerability

Sophos UTM versions 9.405-5 and 9.404-5 suffer from information disclosure vulnerabilities. Product: Sophos UTM Vendor: Sophos ltd. Internal reference: ? Bug ID Vulnerability type: Information Disclosure Vulnerable version: 9.405-5, 9.404-5 and possible other versions affected not tested Vulnerab...

Sophos UTM 9.405-5 / 9.404-5 Information Disclosure

Product: Sophos UTM Vendor: Sophos ltd. Internal reference: ? Bug ID Vulnerability type: Information Disclosure Vulnerable version: 9.405-5, 9.404-5 and possible other versions affected not tested Vulnerable component: Frontend Report confidence: yes Solution status: Not fixed by Vendor, no furth...