Medium · 5.5 CVE-2022-48310 EUVD-2022-51010GHSA-ffx9-rf8p-2px9

An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versio…

Published Mar 1, 2023 · Updated Mar 7, 2025 · Assigned by Sophos

Vendor: Sophos Product: Sophos Connect Client Category: Network devices

Description

An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90.

Affected products

Vendor	Product	Affected	Fixed
Sophos	Sophos Connect Client	unspecified – < 2.2.90	2.2.90

References

https://www.sophos.com/en-us/security-advisories/sophos-sa-20230301-scc-csrf