{"id":"CVE-2011-5117","aliases":["EUVD-2011-5017","GHSA-r9fg-3g6m-68g9"],"status":"published","title":"Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device...","description":"Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00336,"percentile":0.27207,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362"],"published":"2012-08-24T10:00:00Z","modified":"2026-06-16T23:35:58Z","products":[{"vendor":"sophos","product":"disk_encryption"},{"vendor":"sophos","product":"safeguard_easy_device_encryption_client"},{"vendor":"sophos","product":"safeguard_enterprise_device_encryption"}],"references":[{"url":"http://www.sophos.com/en-us/support/knowledgebase/112655.aspx","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-5117"},{"url":"https://github.com/advisories/GHSA-r9fg-3g6m-68g9"}],"sources":{"cve":[{"id":"CVE-2011-5117","description":"Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.","status":"published","published":"2012-08-24T10:00:00Z","modified":"2024-09-16T23:30:23.787Z","updated_at":"2026-11-02T14:35:36.252742Z"}],"euvd":[{"id":"EUVD-2011-5017","description":"Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.","status":"published","published":"2012-08-24T10:00:00Z","modified":"2024-09-16T23:30:23Z","updated_at":"2026-11-03T00:54:50.364031Z"}],"ghsa":[{"id":"GHSA-r9fg-3g6m-68g9","title":"Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device...","description":"Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.","status":"published","published":"2022-05-17T05:25:07Z","modified":"2023-01-28T05:04:06Z","cwes":["CWE-362"],"updated_at":"2026-11-02T14:44:06.354686Z"}],"nvd":[{"id":"CVE-2011-5117","description":"Sophos SafeGuard Enterprise Device Encryption 5.x through 5.50.8.13, Sophos SafeGuard Easy Device Encryption Client 5.50.x, and Sophos Disk Encryption 5.50.x have a delay before removal of (1) out-of-date credentials and (2) invalid credentials, which allows physically proximate attackers to defeat the full-disk encryption feature by leveraging knowledge of these credentials.","status":"published","published":"2012-08-24T10:36:42.067Z","modified":"2026-06-16T23:35:58.82Z","cvss":[{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:02:12.272092Z"}]}}