PT-2022-9676 · Sophos · Sap Authenticator For Android+1

Can Özkan · Published 2022-04-27 · Updated 2022-05-06 · CVE-2021-25266

Positive Technologies (AI Summary)

CVSS v3.1

3.9

Low

Base vector

AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sophos Authenticator for Android versions 3.4 and older Intercept X for Mobile (Android) versions prior to 9.7.3495

Description An insecure data storage issue allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones.

Recommendations For Sophos Authenticator for Android versions 3.4 and older, update to a version newer than 3.4 to resolve the issue. For Intercept X for Mobile (Android) versions prior to 9.7.3495, update to version 9.7.3495 or newer to resolve the issue.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2021-25266

Affected Products

Intercept X For Mobile

Sap Authenticator For Android

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-25266 · Security Note
• https://sophos.com/en-us/security-advisories/sophos-sa-20220427-ixm-storage · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25266 · Vendor Advisory
• https://t.me/cibsecurity/41521 · Telegram Post
• https://t.me/cvenotify/29412 · Telegram Post