CVE-2022-0386: SQL Injection
Published Mar 21, 2022
·Updated
A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.
Affected Software
1 affected component
Sophos Unified Threat Management<9.710
Event History
Mar 21, 2022
CVE Published
via MITRE·11:45 PM
Data Sourced
via MITRE·11:45 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2022-0386?
CVE-2022-0386 is a post-auth SQL injection vulnerability in the Mail Manager of Sophos UTM before version 9.710.
2
How does CVE-2022-0386 impact Sophos UTM?
CVE-2022-0386 potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710.
3
What is the severity of CVE-2022-0386?
CVE-2022-0386 has a severity score of 8.8 (high).
4
How do I fix CVE-2022-0386?
To fix CVE-2022-0386, update to Sophos UTM version 9.710 or later.
5
Where can I find more information about CVE-2022-0386?
More information about CVE-2022-0386 can be found at: https://www.sophos.com/en-us/security-advisories/sophos-sa-20220321-utm-9710