Sensitive Information Disclosure in Sophos UTM by Local Administrators
CVE-2016-7442

4.4MEDIUM

Key Information:

Vendor

Sophos
Status
Unified Threat Management Software
Vendor
CVE Published:
3 October 2016

What is CVE-2016-7442?

A vulnerability exists in the Frontend component of Sophos UTM, which enables local administrators to access sensitive password information. This occurs through the 'value' field of the proxy user settings within the 'system settings / scan settings / anti spam' configuration tab. Such access could potentially compromise the security of user credentials, emphasizing the need for immediate updates and security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securitytracker.com/id/1036931
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/93266
vdb-entryx_refsource_BID
http://www.securityfocus.com/archive/1/539518/100/0/threaded
mailing-listx_refsource_BUGTRAQ

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.