Multiple XSS Vulnerabilities in Sophos Firewall by Sophos
CVE-2021-25267
6.8MEDIUM
Summary
Multiple Cross-Site Scripting (XSS) vulnerabilities in the Webadmin interface of Sophos Firewall can lead to unauthorized privilege escalation. An attacker with access to the admin panel can exploit these vulnerabilities to elevate their privileges to a super-admin level, compromising the security integrity of the firewall. Versions of Sophos Firewall prior to 19.0 GA are susceptible to these risks, emphasizing the need for timely updates and robust security practices.
Affected Version(s)
Sophos Firewall < 19.0 GA
References
CVSS V3.1
Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Gaetano Sapia