Vulnerabilities > CVE-2016-6597 - 7PK - Security Features vulnerability in Sophos Mobile Control EAS Proxy 3.5.0.3
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the resource, aka an Open Reverse Proxy vulnerability.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
Packetstorm
| data source | https://packetstormsecurity.com/files/download/138210/sophosmobilecontrol-openproxy.txt |
| id | PACKETSTORM:138210 |
| last seen | 2016-12-05 |
| published | 2016-08-05 |
| reporter | Tim Kretschmann |
| source | https://packetstormsecurity.com/files/138210/Sophos-Mobile-Control-3.5.0.3-Open-Reverse-Proxy.html |
| title | Sophos Mobile Control 3.5.0.3 Open Reverse Proxy |
References
- http://packetstormsecurity.com/files/138210/Sophos-Mobile-Control-3.5.0.3-Open-Reverse-Proxy.html
- http://packetstormsecurity.com/files/138210/Sophos-Mobile-Control-3.5.0.3-Open-Reverse-Proxy.html
- http://www.securityfocus.com/archive/1/539126/100/0/threaded
- http://www.securityfocus.com/archive/1/539126/100/0/threaded
- http://www.securityfocus.com/bid/92351
- http://www.securityfocus.com/bid/92351
- https://www.pallas.com/advisories/sophos_eas_open_reverse_proxy_vulnerability
- https://www.pallas.com/advisories/sophos_eas_open_reverse_proxy_vulnerability