CVE-2021-25269

A local administrator could prevent the HMPA service from starting despite tamper protection using an unquoted service path vulnerability in the HMPA component of Sophos Intercept X Advanced and Sophos Intercept X Advanced for Server before version 2.0.23, as well as Sophos Exploit Prevention before version 3.8.3.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sophos:exploit_prevention:*:*:*:*:*:*:*:*
cpe:2.3:a:sophos:intercept_x_endpoint:*:*:*:*:*:*:*:*
cpe:2.3:a:sophos:intercept_x_for_server:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-11-26 15:15

Updated : 2024-02-28 18:48


NVD link : CVE-2021-25269

Mitre link : CVE-2021-25269

CVE.ORG link : CVE-2021-25269


JSON object : View

Products Affected

sophos

  • intercept_x_endpoint
  • exploit_prevention
  • intercept_x_for_server
CWE
CWE-428

Unquoted Search Path or Element