Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-1977
network associates
pgp 7.0.4
pgp 7.1
passphrase cache
encryption
vulnerability
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the “Passphrase Cache” option, which could allow attackers to open encrypted files without providing a passphrase.
Affected configurations
Node
pgppgpMatch7.0.4
ORpgppgpMatch7.1
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
Related for CVE-2002-1977