PT-2020-12441 · Sophos · Mac Endpoint For Sophos Central+1

Published 2020-04-17 · Updated 2021-07-21 · CVE-2020-10947

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mac Endpoint for Sophos Central versions 9.9.5 and earlier Mac Endpoint for Sophos Home versions 2.2.5 and earlier

Description The issue allows Privilege Escalation.

Recommendations For Mac Endpoint for Sophos Central versions 9.9.5 and earlier, update to version 9.9.6 or later. For Mac Endpoint for Sophos Home versions 2.2.5 and earlier, update to version 2.2.6 or later.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2020-10947

Affected Products

Mac Endpoint For Sophos Central

Mac Endpoint For Sophos Home

References · 6

• https://community.sophos.com/b/security-blog/posts/advisory-cve-2020-10947---sophos-anti-virus-for-macos-privilege-escalation · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10947 · Vendor Advisory
• https://sophos.com/en-us.aspx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10947 · Security Note
• https://t.me/cvenotify/14258 · Telegram Post
• https://t.me/cvenotify/2872 · Telegram Post