April 9, 2019—KB4493471 (Monthly Rollup)

None None...

April 9, 2019—KB4493458 (Security-only update)

None None...

April 9, 2019—KB4493450 (Security-only update)

None None...

CVE-2014-2005

Sophos Disk Encryption SDE 5.x in Sophos Enterprise Console SEC 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen...

CVE-2014-2005

CVE-2014-2005 concerns Sophos Disk Encryption (SDE) 5.x managed via Sophos Enterprise Console (SEC) 5.x, prior to 5.2.2. It allows an unauthenticated, physically proximate attacker to resume from sleep without a login screen, gaining desktop access. Affected: SDE/SEC stack; root cause: failure to...

CVE-2014-2005: Improper Authentication

Sophos Disk Encryption SDE 5.x in Sophos Enterprise Console SEC 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically proximate attackers to obtain desktop access by leveraging the absence of a login screen...