A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full...
Paquets affectés
| Écosystème | Paquet | Concernées | Corrigé |
|---|---|---|---|
| WatchGuard | WatchGuard Agent |
< 1.17.24.0000 |
1.17.24.0000 |
Description d'origine La description telle que publiée par la source (souvent en anglais).
A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
Références
- web psirt.watchguard.com
- web nvd.nist.gov
- web github.com