Security Advisory
CVE-2017-6183
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NSWA-1314.