Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-36809 EUVD-2021-23385GHSA-c7p5-h3xc-723m

A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially resulting in …

Published Mar 7, 2022 · Updated Aug 4, 2024 · Assigned by Sophos

Description

A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially resulting in a denial of service and data loss, in all versions of Sophos SSL VPN client.

Affected products

VendorProductAffectedFixed
Sophos SSL VPN client unspecified – ≤ 2.3.8.0 —

References