CVE-2012-4736

EUVD-2012-4661
The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction with a user-defined key, does not properly block use of exFAT USB flash drives, which makes it easier for local users to bypass intended access restrictions and copy sensitive information to a drive via multiple removal and reattach operations.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
Affected Products (NVD)
VendorProductVersion
sophossafeguard_enterprise
6.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.sophos.com/support/knowledgebase/1376/1380/114138.aspx
https://exchange.xforce.ibmcloud.com/vulnerabilities/78580
http://www.sophos.com/support/knowledgebase/1376/1380/114138.aspx
https://exchange.xforce.ibmcloud.com/vulnerabilities/78580