NVD

Id
30517  
Name
CVE-2014-2005  
Description
Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-06-25  
Modified Date
2017-01-06  
Seq
2014-2005  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161337 30517 CVE-2014-2005 JVN#63940326  View
161338 30517 CVE-2014-2005 JVNDB-2014-000061  View
161339 30517 CVE-2014-2005 68169  View
161340 30517 CVE-2014-2005 http://www.sophos.com/en-us/support/knowledgebase/121066.aspx  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12042 JVNDB-2014-000061 Sophos Disk Encryption における認証不備の脆弱性 ソフォス株式会社が提供する Sophos Disk Encryption には、認証不備の脆弱性が存在します。 CVE-2014-2005 69292 CVE-2014-2005 30517 4.7 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000061.html 2014-06-24 2014-06-26 View