PT-2023-15689 · Sophos · Sophos Connect

CVE-2022-48310 · Publicado 2023-03-01 · Atualizado 2023-03-09

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sophos Connect versions prior to 2.2.90

Description An information disclosure issue allows sensitive key material to be included in technical support archives.

Recommendations For Sophos Connect versions prior to 2.2.90, update to version 2.2.90 or later to resolve the issue.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2022-48310

Produtos afetados

Sophos Connect

Referências · 5

• https://osv.dev/vulnerability/CVE-2022-48310 · Aviso do Fabricante
• https://t.me/cibsecurity/59273 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-48310 · Nota de Segurança
• https://sophos.com/en-us/security-advisories/sophos-sa-20230301-scc-csrf · Aviso do Fabricante
• https://t.me/cvenotify/45294 · Publicação no Telegram