CVEvulnerability

CVE-2011-5117

6.9 MEDIUM Published 2012-08-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-08-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-362

Description

Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.

Affected configurations

• sophos safeguard enterprise device encryption 5.6 • sophos safeguard enterprise device encryption 5.35.0 • sophos safeguard enterprise device encryption 5.35.1 • sophos safeguard enterprise device encryption 5.35.2 • sophos safeguard enterprise device encryption 5.35.3 • sophos safeguard enterprise device encryption 5.40.0 • sophos safeguard enterprise device encryption 5.50.0 • sophos safeguard enterprise device encryption 5.50.1 • sophos safeguard enterprise device encryption 5.50.8 • sophos safeguard easy device encryption client 5.50.0 • sophos safeguard easy device encryption client 5.50.1 • sophos safeguard easy device encryption client 5.50.8 • sophos disk encryption 5.50.0 • sophos disk encryption 5.50.1 • sophos disk encryption 5.50.8

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References