Important Sophos Security Advisory for Sophos Mobile and Sophos Mobile Control
Sophos has released a security update to Sophos Mobile and Sophos Mobile Control installed on premises. Customers running Sophos Mobile managed in Sophos Central or the hosted Sophos Mobile as a Service are not affected by this issue.
This update fixes a security bypass bug that could allow an unauthenticated user to access the administration console or the self-service portal.
This vulnerability was responsibly disclosed to Sophos on 2018-03-21. We are not aware of any attempts to exploit this bug in the wild.
We have assessed this update as critical and therefore advise you to install the update as soon as possible.
For more information, please read this knowledge base article on our support site: https://community.sophos.com/kb/131867.