CVE-2016-7786

Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via direct object reference, as demonstrated by a request for Licenseinformation.jsp. This is fixed in 10.6.5...

CVE-2016-7786

CVE-2016-7786 affects Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5. The vulnerability is an Insecure Direct Object Reference in Licenseinformation.jsp that allows remote authenticated users to bypass access controls. The issue stems from insufficient input handling in the Access Restriction component,...