Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7
CVSSv3

CVE-2021-36808

Published: 30/10/2021 Updated: 29/11/2021
CVSS v2 Base Score: 4.4 | Impact Score: 6.4 | Exploitability Score: 3.4
CVSS v3 Base Score: 7 | Impact Score: 5.9 | Exploitability Score: 1
VMScore: 392
Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Sophos Secure Workspace

Vulnerability Summary

A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sophos sophos secure workspace

Github Repositories

https://github.com/ctuIhu/CVE-2021-36808

A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115.

CVE-2021-36808 A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 973115 Advisory: wwwsophoscom/en-us/security-advisories/sophos-sa-20211029-ssw-pw-bypass Write Up: ctulhume/posts/sophos-secure-workspace-app-password-bypass/

References

CWE-362https://www.sophos.com/en-us/security-advisories/sophos-sa-20211029-ssw-pw-bypasshttps://nvd.nist.govhttps://github.com/ctuIhu/CVE-2021-36808
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4654CVE-2023-49606encryptionNULL pointer dereferenceCVE-2024-4439CVE-2024-4649race conditionCVE-2024-27202CVE-2024-34566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook