medium6.9
CVE-2011-5117
Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x h…
Impact
Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Safeguard Enterprise Device Encryption | Versions 5.6, 5.35.0, 5.35.1, 5.35.2, 5.35.3, 5.40.0 |
| Sophos | Safeguard Easy Device Encryption Client | Versions 5.50.0, 5.50.1, 5.50.8 |
| Sophos | Disk Encryption | Versions 5.50.0, 5.50.1, 5.50.8 |