Description
A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sophos | Intercept X Advanced | unspecified – < 2.0.23 | 2.0.23 |
| Sophos | Intercept X Advanced for Server | unspecified – < 2.0.23 | 2.0.23 |
| Sophos | Sophos Exploit Prevention | unspecified – < 3.8.3 | 3.8.3 |