Security Advisory
CVE-2017-6183
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machines configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NSWA-1314.