Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 6 subscribers
  • Views 2355 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

CVE-2016-7442 Vulnerability Alert

Hunt Lee

Hi all,

 

My client is currently using UTM 9 on 9.405-5.  My client is concerned about the vulnerability released last week CVE-2016-7442 and CVE-2016-7397.

Vulnerability Details:

The password is reflected to DOM and is readable through the "value" field of the SMTP user settings in notifications tab. You have to be authenticated to access the configuration tab.

 

Has Sophos got any fix for this?

Cheers

Hunt



This thread was automatically locked due to age.
Unfiltered HTML