SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2014-2849

The Change Password dialog box (change_password) in Sophos Web Appliance before 3.8.2 allows remote authenticated users to change the admin user password via a crafted request.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 8.5
Exploit Score: 8.0
Impact Score: 9.2

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality: NONE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

EXPLOIT-DB-32789

SECUNIA-57706

BID-66734

http://www.sophos.com/en-us/support/knowledgebase/120230.aspx

http://www.zerodayinitiative.com/advisories/ZDI-14-069/


30479



423868



249622



909



195521



282