Information disclosure

2023-03-0119:15:00

PRIOn knowledge base

www.prio-n.com

information disclosure

sensitive key material

technical support archives

nvd

sophos connect

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90.

CPENameOperatorVersion
connectlt2.2.90

CPE	Name	Operator	Version
	connect	lt	2.2.90

References

www.sophos.com/en-us/security-advisories/sophos-sa-20230301-scc-csrf