CVE-2016-7786

Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via direct object reference, as demonstrated by a request for Licenseinformation.jsp. This is fixed in 10.6.5...

CVE-2016-7786

CVE-2016-7786 affects Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5. The vulnerability is an Insecure Direct Object Reference in Licenseinformation.jsp that allows remote authenticated users to bypass access controls. The issue stems from insufficient input handling in the Access Restriction component,...

PT-2017-9342

Name of the Vulnerable Software and Affected Versions Sophos Cyberoam UTM CR25iNG versions 10.6.3 MR-5 through 10.6.4 Description The issue allows remote authenticated users to bypass intended access restrictions via direct object reference. This can be demonstrated by a request for...

CVE-2016-7786: Undefined Security Weakness

Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via direct object reference, as demonstrated by a request for Licenseinformation.jsp. This is fixed in 10.6.5...