Design/Logic Flaw

2022-04-2717:15:00

PRIOn knowledge base

www.prio-n.com

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile (Android) before version 9.7.3495.

CPENameOperatorVersion
authenticatorle3.4
intercept_xlt9.7.3495

CPE	Name	Operator	Version
	authenticator	le	3.4
	intercept_x	lt	9.7.3495

References

www.sophos.com/en-us/security-advisories/sophos-sa-20220427-ixm-storage