medium4.4
CVE-2021-25269
A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component…
Impact
A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Exploit Prevention | before 3.8.3 |
| Sophos | Intercept X Endpoint | before 2.0.23 |
| Sophos | Intercept X For Server | before 2.0.23 |