CVE-2013-2641
Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2014-03-18
- Last modified
- 2024-08-06
- Weaknesses
- CWE-22
Affected products
References
- http://www.sophos.com/en-us/support/knowledgebase/118969.aspx
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130403-0_Sophos_Web_Protection_Appliance_Multi…
