CVE-2021-36808
Medium
Description
A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115.
SeverityMedium
CVSS5.9
Exploit probability—
Product
Sophos Secure Workspace
PublishedOct 30, 2021
First seenOct 30, 2021
How to fix
Update
- sophos sophos_secure_workspace9.7.3115 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos sophos_secure_workspace | v < 9.7.3115 | 9.7.3115 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.