CVE-2021-25265

概要

参考情報

• community.sophos.com/b/security-blog · Vendor Advisory
• community.sophos.com/b/security-blog/posts/resolved-rce-in-sophos-connect-client-for-windows-cve-2021-25265 · Patch

connect のその他の脆弱性

• CVE-2022-4901中 6.1Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a maliciou…
• CVE-2022-48310中 5.5An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect version…
• CVE-2022-48309中 4.3A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90.