CVE-2022-3709: XSS
First published: Thu Dec 01 2022(Updated: )
A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA.
Credit: security-alert@sophos.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sophos Xg Firewall Firmware | <=19.0 | |
| Sophos XG Firewall |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-3709?
CVE-2022-3709 is a stored XSS vulnerability that allows admin to super-admin privilege escalation in the Webadmin import group wizard of Sophos Firewall releases older than version 19.5 GA.
How can the CVE-2022-3709 vulnerability be exploited?
The CVE-2022-3709 vulnerability can be exploited by an admin to escalate their privileges to super-admin through the Webadmin import group wizard in Sophos Firewall releases older than version 19.5 GA.
What is the severity of CVE-2022-3709?
CVE-2022-3709 has a severity rating of high with a CVSS score of 8.4.
Which versions of Sophos Firewall are affected by CVE-2022-3709?
Sophos Firewall releases older than version 19.5 GA are affected by CVE-2022-3709.
How can I fix the CVE-2022-3709 vulnerability?
To fix the CVE-2022-3709 vulnerability, it is recommended to upgrade Sophos Firewall to version 19.5 GA or newer.
- collector/nvd-index
- vendor/sophos
- canonical/sophos xg firewall firmware
- version/sophos xg firewall firmware/19.0
- canonical/sophos xg firewall