high8.8Public exploit code
CVE-2016-7786
Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via direct object reference, as demonstrated b…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sophos Cyberoam UTM CR25iNG - 10.6.3 MR-5 - Direct Object Reference2018-04-16 · webapps · jsp
Impact
Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via direct object reference, as demonstrated by a request for Licenseinformation.jsp. This is fixed in 10.6.5.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Cyberoam Cr25ing Utm Firmware | Version 10.6.2 |