low3.3
CVE-2022-0652
Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions.
Impact
Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Unified Threat Management | before 9.710 |