Security Advisory

CVE-2022-0652

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-21 23:45:15

Last updated 2024-08-02 23:32:46

Assigner Sophos

CVSS score 3.3

State PUBLISHED

Description

Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710.

← Browse all CVEs View on cve.org ↗