CVE-2021-36808

CVE-2021-36808 A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115. Advisory: https://www.sophos.com/en-us/security-advisories/sophos-sa-20211029-ssw-pw-bypass Write Up:...

EUVD-2021-23384

Malware in sbrugna...

CVE-2021-36808

A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115...

CVE-2021-36808

A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115...

CVE-2021-36808

A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115...

Race condition

A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115...

CVE-2021-36808

CVE-2021-36808 affects Sophos Secure Workspace for Android; a race condition before version 9.7.3115 allows a local attacker to bypass the app password. Reported by multiple sources (NVD entry and Red Hat/CNVD/CVE lists). Notable details: attack is local with no user interaction required (per CVS...

CVE-2021-36808

A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115...

PT-2021-21374

Name of the Vulnerable Software and Affected Versions Sophos Secure Workspace for Android versions prior to 9.7.3115 Description A local attacker could bypass the app password using a race condition. Recommendations For versions prior to 9.7.3115, update to version 9.7.3115 or later to resolve th...

Sophos Secure Workspace For Android 竞争条件问题漏洞

Sophos Secure Workspace For Android is an application from Sophos UK for Android. Used to manage documents stored in the cloud and view documents published via Sophos Mobile servers, Sophos Secure Workspace For Android is vulnerable to a contention issue that could be exploited by a local attacke...

CVE-2021-36808: Concurrent Execution using Shared Resource with Improper Synchronization

A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115...

SEC Consult SA-20110810-0 :: Client-side remote file upload & command execution in Check Point SSL VPN On-Demand applications - CVE-2011-1827

SEC Consult Vulnerability Lab Security Advisory 20110810-0 ======================================================================= title: Client-side remote file upload & command execution product: Check Point SSL VPN On-Demand applications signed Java applet and ActiveX control SSL Network...