NVD

Id
11377  
Name
CVE-2011-5117  
Description
Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2012-08-24  
Modified Date
2012-08-24  
Seq
2011-5117  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62752 11377 CVE-2011-5117 http://www.sophos.com/en-us/support/knowledgebase/112655.aspx  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34881 JVNDB-2011-005123 複数の Sophos 製品におけるフルディスク暗号化の機能を破られる脆弱性 複数の Sophos 製品は、(1) 期限切れの資格情報、および (2) 無効な資格情報の削除が遅れるため、フルディスク暗号化の機能を破られる脆弱性が存在します。 CVE-2011-5117 53024 CVE-2011-5117 11377 6.9 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005123.html 2011-01-06 2012-08-27 View