Sophos Firewall Sensitive Information Disclosure Vulnerability
Release Date:
19 Oct 2023
3601
Views
RISK: Medium Risk
TYPE: Security software and application - Security Software & Appliance
A vulnerability has been identified in Sophos Firewall. A remote user can exploit this vulnerability to trigger sensitive information disclosure on the targeted system.
Impact
- Information Disclosure
System / Technologies affected
- Sophos Firewall version prior to v19.5 MR3 (19.5.3)
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
https://www.sophos.com/en-us/security-advisories/sophos-sa-20231017-spx-password
Note: There is no action required for Sophos Firewall customers with the "Allow automatic installation of hotfixes" feature enabled. Enabled is the default setting.
Vulnerability Identifier
Source
Related Link
Related Tags
Share with