CVE-2014-2849
8.5
Vector
AV:N/AC:L/Au:S/C:N/I:C/A:C
Exploitability: 8.0 / Impact: 9.2
Source: NVD
Description
The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.
Affected (79)
Products: Sophos: Web Appliance Firmware, Web Appliance
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.7.8 | |
| All versions |
Related CWEs
References (10)
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.