Sophos security advisories, March 2022

Every Sophos security advisory published in March 2022, from Sophos ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 5
Critical: 1
High: 1
In CISA KEV: 1
CVEs: 5

Sophos advisories published in March 2022

Mar 29, 2022
Medium [CVE-2022-0331] Sophos Firewall: information disclosure vulnerability in Webadmin
Medium5.3
Mar 25, 2022
Critical [CVE-2022-1040] Sophos Firewall: authentication bypass vulnerability in the User Portal and Webadmin
Critical9.8ExploitedCISA KEV
Mar 22, 2022
High [CVE-2022-0386] Sophos UTM: post-auth SQL injection vulnerability in the Mail Manager potentially
High8.8
Mar 22, 2022
Low [CVE-2022-0652] Sophos UTM: Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions.
Low3.3
Mar 8, 2022
Medium [CVE-2021-36809] local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially…
Medium6.1

Get an email when Sophos publishes the next one.

See Sophos's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Sophos

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.