Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3xf5-6j2f-h2hr

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen.

Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen.

EPSS

Процентиль: 18%
0.00058
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 6.8
nvd
больше 11 лет назад

Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen.

EPSS

Процентиль: 18%
0.00058
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-287