Description (CNA)
Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sophos / Sophos UTM | affected unspecified before 9.710 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.