CVE-2023-5552 — Sophos / Sophos Firewall

CVE-2023-5552

Sophos / Sophos Firewall PUBLISHED

Description (CNA)

A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version 19.5 MR3 (19.5.3) and older, if the password type is set to “Specified by sender”.

Affected (CNA)

Vendor / product	Versions
Sophos / Sophos Firewall	unaffected 19.5.4; unaffected 20.0.0

CWE

CWE-200

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20231017-spx-password

ADP enrichment

CVE

No English description supplied.

https://www.sophos.com/en-us/security-advisories/sophos-sa-20231017-spx-password

CISA-ADP

No English description supplied.

No references supplied.