CVE-2014-2005 in Disk Encryption
Résumé (Anglaise)
Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Réserver
17/02/2014
Divulgation
25/06/2014
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 65964 | Sophos Disk Encryption Sleep Mode authentification faible | 287 | Non prouvée | Correctif officiel | CVE-2014-2005 |