Description
Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sophos | Sophos UTM | unspecified – < 9.710 | 9.710 |