CVE-2021-25269

A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sophos:exploit_prevention:*:*:*:*:*:*:*:*
cpe:2.3:a:sophos:intercept_x_endpoint:*:*:*:*:*:*:*:*
cpe:2.3:a:sophos:intercept_x_for_server:*:*:*:*:*:*:*:*

History

21 Nov 2024, 05:54

Type Values Removed Values Added
References () https://www.sophos.com/en-us/security-advisories/sophos-sa-20211126-ixa-hmpa-local-dosĀ - Vendor Advisory () https://www.sophos.com/en-us/security-advisories/sophos-sa-20211126-ixa-hmpa-local-dosĀ - Vendor Advisory

Information

Published : 2021-11-26 15:15

Updated : 2024-11-21 05:54


NVD link : CVE-2021-25269

Mitre link : CVE-2021-25269

CVE.ORG link : CVE-2021-25269


JSON object : View

Products Affected

sophos

  • intercept_x_for_server
  • exploit_prevention
  • intercept_x_endpoint
CWE
CWE-428

Unquoted Search Path or Element