CVE-2014-2005 in Disk Encryption
요약 (영어)
Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
예약하다
2014. 02. 17.
공개
2014. 06. 25.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 65964 | Sophos Disk Encryption Sleep Mode 약한 인증 | 287 | 입증되지 않음 | 공식 수정 | CVE-2014-2005 |