Persistent XSS Vulnerability in Sophos XG Firewall's Logging Subsystem
CVE-2017-18014

6.1MEDIUM

Key Information:

Vendor

Sophos
Status
Sfos
Vendor
CVE Published:
12 January 2018

What is CVE-2017-18014?

A vulnerability within the logging subsystem of the Sophos XG Firewall allows unauthenticated users to exploit a persistent XSS flaw in the webadmin interface. Specifically, this weakness exists in the WAF log page, where an attacker can manipulate the 'User-Agent' parameter in HTTP POST requests. Exploiting this vulnerability could enable unauthorized actions such as creating new user accounts, enabling SSH access, or adding SSH authorized keys, compromising the integrity and security of the firewall configuration.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://community.sophos.com/products/xg-firewall/b/xg-bl...
x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2018/Jan/24
mailing-listx_refsource_FULLDISC
https://community.sophos.com/kb/en-us/128024
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.