CVE-2017-6412

In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.

• CWE-384

• http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.htmlRelease Notes, Vendor Advisory
• http://www.securityfocus.com/bid/97261
• https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2Vendor Advisory
• https://www.qualys.com/2017/02/28/qsa-2017-02-28/qsa-2017-02-28.pdf
• http://wsa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.2.htmlRelease Notes, Vendor Advisory
• http://www.securityfocus.com/bid/97261
• https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-v4-3-1-2Vendor Advisory
• https://www.qualys.com/2017/02/28/qsa-2017-02-28/qsa-2017-02-28.pdf

Published

Mar 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6406An issue was discovered in Veritas NetBackup Before 7.7.2 an…
• CVE-2017-6407An issue was discovered in Veritas NetBackup Before 7.7.2 an…
• CVE-2017-6408An issue was discovered in Veritas NetBackup 8.0 and earlier…
• CVE-2017-6409An issue was discovered in Veritas NetBackup 8.0 and earlier…
• CVE-2017-6410kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.…
• CVE-2017-6411Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_…
• CVE-2017-6413The "OpenID Connect Relying Party and OAuth 2.0 Resource Ser…
• CVE-2017-6414Memory leak in the vcard_apdu_new function in card_7816.c in…6.5
• CVE-2017-6415The dex_parse_debug_item function in libr/bin/p/bin_dex.c in…5.5
• CVE-2017-6416An issue was discovered in SysGauge 1.5.18. A buffer overflo…
• CVE-2017-6417Code injection vulnerability in Avira Total Security Suite 1…
• CVE-2017-6418libclamav/message.c in ClamAV 0.99.2 allows remote attackers…