PT-2012-5563 · Sophos · Sophos Safeguard Enterprise

Published 2012-08-29 · Updated 2017-08-29 · CVE-2012-4736

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sophos SafeGuard Enterprise version 6.0

Description The issue arises when a volume-based encryption policy is enabled in conjunction with a user-defined key in the Device Encryption Client component. This configuration fails to properly block the use of exFAT USB flash drives, making it easier for local users to bypass intended access restrictions. Users can exploit this by copying sensitive information to a drive via multiple removal and reattach operations.

Recommendations For Sophos SafeGuard Enterprise version 6.0, consider disabling the use of exFAT USB flash drives or restricting access to sensitive information until a proper fix is applied. As a temporary workaround, restrict the ability to remove and reattach USB drives to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-4736

Affected Products

Sophos Safeguard Enterprise

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-4736 · Security Note
• http://sophos.com/support/knowledgebase/1376/1380/114138.aspx · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78580 · Note