Lucene search

[email protected]CVE-2011-5117

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-5117

2022-10-0316:15:11

CWE-362

[email protected]

web.nvd.nist.gov

sophos

safeguard

enterprise

device encryption

vulnerability

cve-2011-5117

nvd

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%

JSON

Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.

Affected configurations

NVD

Node

sophossafeguard_enterprise_device_encryptionMatch5.6

sophossafeguard_enterprise_device_encryptionMatch5.35.0

sophossafeguard_enterprise_device_encryptionMatch5.35.1

sophossafeguard_enterprise_device_encryptionMatch5.35.2

sophossafeguard_enterprise_device_encryptionMatch5.35.3

sophossafeguard_enterprise_device_encryptionMatch5.40.0

sophossafeguard_enterprise_device_encryptionMatch5.50.0

sophossafeguard_enterprise_device_encryptionMatch5.50.1

sophossafeguard_enterprise_device_encryptionMatch5.50.8

Node

sophossafeguard_easy_device_encryption_clientMatch5.50.0

sophossafeguard_easy_device_encryption_clientMatch5.50.1

sophossafeguard_easy_device_encryption_clientMatch5.50.8

Node

sophosdisk_encryptionMatch5.50.0

sophosdisk_encryptionMatch5.50.1

sophosdisk_encryptionMatch5.50.8

CPENameOperatorVersion
sophos:safeguard_enterprise_device_encryptionsophos safeguard enterprise device encryptioneq5.6
sophos:safeguard_enterprise_device_encryptionsophos safeguard enterprise device encryptioneq5.35.0
sophos:safeguard_enterprise_device_encryptionsophos safeguard enterprise device encryptioneq5.35.1
sophos:safeguard_enterprise_device_encryptionsophos safeguard enterprise device encryptioneq5.35.2
sophos:safeguard_enterprise_device_encryptionsophos safeguard enterprise device encryptioneq5.35.3
sophos:safeguard_enterprise_device_encryptionsophos safeguard enterprise device encryptioneq5.40.0
sophos:safeguard_enterprise_device_encryptionsophos safeguard enterprise device encryptioneq5.50.0
sophos:safeguard_enterprise_device_encryptionsophos safeguard enterprise device encryptioneq5.50.1
sophos:safeguard_enterprise_device_encryptionsophos safeguard enterprise device encryptioneq5.50.8

CPE	Name	Operator	Version
sophos:safeguard_enterprise_device_encryption	sophos safeguard enterprise device encryption	eq	5.6
sophos:safeguard_enterprise_device_encryption	sophos safeguard enterprise device encryption	eq	5.35.0
sophos:safeguard_enterprise_device_encryption	sophos safeguard enterprise device encryption	eq	5.35.1
sophos:safeguard_enterprise_device_encryption	sophos safeguard enterprise device encryption	eq	5.35.2
sophos:safeguard_enterprise_device_encryption	sophos safeguard enterprise device encryption	eq	5.35.3
sophos:safeguard_enterprise_device_encryption	sophos safeguard enterprise device encryption	eq	5.40.0
sophos:safeguard_enterprise_device_encryption	sophos safeguard enterprise device encryption	eq	5.50.0
sophos:safeguard_enterprise_device_encryption	sophos safeguard enterprise device encryption	eq	5.50.1
sophos:safeguard_enterprise_device_encryption	sophos safeguard enterprise device encryption	eq	5.50.8

References

www.sophos.com/en-us/support/knowledgebase/112655.aspx

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%

JSON

Related for CVE-2011-5117

nvd1 cvelist1 prion1