CVE-2011-5117

Sophos SafeGuard Enterprise Device Encryption 5.x–5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x are affected by a delay in removing (1) out‑of‑date credentials and (2) invalid credentials. This timing gap lets a physically proximate attacker d...