CVE-2016-7397: Infoleak
Published Oct 3, 2016
·Updated
The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in the notifications configuration tab.
Affected Software
1 affected component
Sophos Unified Threat Management<=9.405-5
Event History
Oct 3, 2016
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-7397?
CVE-2016-7397 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2016-7397?
To fix CVE-2016-7397, upgrade the Sophos UTM firmware to version 9.405-6 or later.
3
What does CVE-2016-7397 affect?
CVE-2016-7397 affects the Frontend component in Sophos UTM running firmware 9.405-5 and earlier.
4
What information can be exposed by CVE-2016-7397?
CVE-2016-7397 allows local administrators to obtain sensitive password information from the SMTP user settings.
5
Who is affected by CVE-2016-7397?
Local administrators of Sophos UTM systems using affected versions are at risk from CVE-2016-7397.