CVE-2012-4736

BASSO 3.3CVE-2012-4736 · Published 29/08/2012 · updated 16/06/2026

In breve

CVE-2012-4736 è una vulnerabilità BASSO (CVSS 3.3) che riguarda safeguard enterprise (sophos).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.45%, superiore al 38.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
safeguard enterprise sophos	`= 6.0`	No fix yet

Description

The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions and copy sensitive information to a drive via multiple removal and reattach operations.

References

sophos.com/support/knowledgebase/1376/1380/114138.aspx · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/78580

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free