| Package | Affected versions | Patched versions |
|---|---|---|
| unified threat management | < 9.710 | 9.710 |
Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free