CVE-2017-6412 | Sophos Web Appliance up to 4.3.1.1 session fixiation (EDB-42012 / Nessus ID 99237)
A vulnerability classified as critical was found in Sophos Web Appliance up to 4.3.1.1. The impacted element is an unknown function. Executing manipulation can lead to session fixiation.
This vulnerability is handled as CVE-2017-6412. The attack can be executed remotely. Additionally, an exploit exists.
Upgrading the affected component is advised.