CVE-2022-48310: medium-severity vulnerability in Sophos Connect Client
Published · Updated
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.1%
exploitation probability
0.1%top 98% of all CVEs
observed exploitation
nono source reports it
An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Sophos · Sophos Connect ClientRelated CVEs — Sophos Connect Client
In the same product, most dangerous first.