CVE-2022-48310: Medium severity sophos connect vulnerability
Published Mar 1, 2023
·Updated
An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90.
Affected Software
1 affected component
Sophos Connect<2.2.90
Event History
Mar 1, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2022-48310?
CVE-2022-48310 is an information disclosure vulnerability in Sophos Connect versions older than 2.2.90.
2
How does CVE-2022-48310 affect Sophos Connect?
CVE-2022-48310 allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90.
3
What is the severity of CVE-2022-48310?
The severity of CVE-2022-48310 is medium with a CVSS score of 5.5.
4
How can I check if my Sophos Connect version is affected?
You can check if your Sophos Connect version is affected by comparing it with the vulnerable version: 2.2.90 and older.
5
How do I fix CVE-2022-48310 in Sophos Connect?
To fix CVE-2022-48310 in Sophos Connect, update to version 2.2.90 or newer.