Sophos Web Appliance version 4.3.1.1 suffers from a session fixation vulnerability. Continue reading...