high8.1Public exploit code
CVE-2017-6412
In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sophos Web Appliance 4.3.1.1 - Session Fixation2017-02-28 · webapps · php · Verified
Impact
In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Web Appliance | through 4.3.1.1 |