Description (CNA)
Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18.5 MR4 and version 19.0 MR1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sophos / Sophos Firewall | affected unspecified before 18.5 MR4; affected unspecified before 19.0 MR1 |
CWE
No CWE identifiers supplied.
References
- https://www.sophos.com/en-us/security-advisories/sophos-sa-20220907-sfos-18-5-4
- https://www.sophos.com/en-us/security-advisories/sophos-sa-20220907-sfos-19-0-1
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.