PT-2012-5563 · Sophos · Sophos Safeguard Enterprise

Publicado 2012-08-29 · Atualizado 2017-08-29 · CVE-2012-4736

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sophos SafeGuard Enterprise version 6.0

Description The issue arises when a volume-based encryption policy is enabled in conjunction with a user-defined key in the Device Encryption Client component. This configuration fails to properly block the use of exFAT USB flash drives, making it easier for local users to bypass intended access restrictions. Users can exploit this by copying sensitive information to a drive via multiple removal and reattach operations.

Recommendations For Sophos SafeGuard Enterprise version 6.0, consider disabling the use of exFAT USB flash drives or restricting access to sensitive information until a proper fix is applied. As a temporary workaround, restrict the ability to remove and reattach USB drives to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-4736

Produtos afetados

Sophos Safeguard Enterprise

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/78580 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4736 · Nota de Segurança
• http://sophos.com/support/knowledgebase/1376/1380/114138.aspx · Aviso do Fabricante