Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2022-0652

Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Sophos

Description

Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sophos Sophos UTM

  • unspecified to < 9.710affected

References