← CVE Intelligence

CVE-2021-25266

Sophos / Intercept X for Mobile (Android) PUBLISHED

Description (CNA)

An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile (Android) before version 9.7.3495.

Affected (CNA)

Vendor / productVersions
Sophos / Intercept X for Mobile (Android)affected unspecified before 9.7.3495
Sophos / Sophos Authenticator (Android)affected unspecified through 3.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.