CVE:CVE-2011-5117
CNNVD:CNNVD-201208-473
Sophos SafeGuard Enterprise Device Encryption 5.x版本至5.50.8.13版本、Sophos SafeGuard Easy Device Encryption Client 5.50.x版本、Sophos Disk Encryption 5.50.x版本中存在漏洞，该漏洞源于删除(1)过期的凭证和(2)无效的凭证之前有延迟。相邻攻击者可利用这些凭证的知识破解所有磁盘加密功能。
solution:Upgrade sophos safeguard_enterprise_device_encryption to a higher version than 5.6,5.35.0,5.35.1,5.35.2,5.35.3,5.40.0,5.50.0,5.50.1,5.50.8,and avoid the version 5.6,5.35.0,5.35.1,5.35.2,5.35.3,5.40.0,5.50.0,5.50.1,5.50.8; Upgrade sophos safeguard_easy_device_encryption_client to a higher version than 5.50.0,5.50.1,5.50.8,and avoid the version 5.50.0,5.50.1,5.50.8; Upgrade sophos disk_encryption to a higher version than 5.50.0,5.50.1,5.50.8,and avoid the version 5.50.0,5.50.1,5.50.8