PT-2018-18918 · Sophos · Sophos Endpoint Protection

Hyp3Rlinx + 1 · Publicado 2018-04-05 · Atualizado 2019-10-03 · CVE-2018-9233

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sophos Endpoint Protection version 10.7

Description The issue concerns the use of an unsalted SHA-1 hash for password storage in the machine.xml file, making it easier for attackers to determine the cleartext password via rainbow tables or other approaches. This could allow attackers to choose unsafe malware settings.

Recommendations For Sophos Endpoint Protection version 10.7, consider updating the password storage mechanism to use a more secure hashing algorithm with salting to prevent easy determination of cleartext passwords. As a temporary workaround, restrict access to the machine.xml file to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-916

Identificadores relacionados

CVE-2018-9233

Produtos afetados

Sophos Endpoint Protection

Referências · 5

• 🔥 http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-CONTROL-PANEL-v10.7-INSECURE-CRYPTO-CVE-2018-9233.txt · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Apr/7 · Exploit
• 🔥 https://exploit-db.com/exploits/44411 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-9233 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-9233 · Aviso do Fabricante