Lucene search

[email protected]CVE-2014-3431

HistoryJun 21, 2014 - 3:55 p.m.

CVE-2014-3431

2014-06-2115:55:04

CWE-264

[email protected]

web.nvd.nist.gov

symantec

pgp desktop

encryption

os x

vulnerability

cve-2014-3431

nvd

6.5 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.4%

JSON

Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.

Affected configurations

NVD

Node

symantecencryption_desktopMatch10.3.0professional

symantecencryption_desktopMatch10.3.1professional

symantecencryption_desktopMatch10.3.2-professional

symantecencryption_desktopMatch10.3.2mp1professional

symantecpgp_desktopMatch10.0.0

symantecpgp_desktopMatch10.0.1

symantecpgp_desktopMatch10.0.2

symantecpgp_desktopMatch10.0.3

symantecpgp_desktopMatch10.1.0

symantecpgp_desktopMatch10.1.1

symantecpgp_desktopMatch10.1.2

symantecpgp_desktopMatch10.2.0

symantecpgp_desktopMatch10.2.1

symantecpgp_desktopMatch10.2.2

AND

applemac_os_x

CPENameOperatorVersion
symantec:encryption_desktopsymantec encryption desktopeq10.3.0
symantec:encryption_desktopsymantec encryption desktopeq10.3.1
symantec:encryption_desktopsymantec encryption desktopeq10.3.2
symantec:pgp_desktopsymantec pgp desktopeq10.0.0
symantec:pgp_desktopsymantec pgp desktopeq10.0.1
symantec:pgp_desktopsymantec pgp desktopeq10.0.2
symantec:pgp_desktopsymantec pgp desktopeq10.0.3
symantec:pgp_desktopsymantec pgp desktopeq10.1.0
symantec:pgp_desktopsymantec pgp desktopeq10.1.1
symantec:pgp_desktopsymantec pgp desktopeq10.1.2

CPE	Name	Operator	Version
symantec:encryption_desktop	symantec encryption desktop	eq	10.3.0
symantec:encryption_desktop	symantec encryption desktop	eq	10.3.1
symantec:encryption_desktop	symantec encryption desktop	eq	10.3.2
symantec:pgp_desktop	symantec pgp desktop	eq	10.0.0
symantec:pgp_desktop	symantec pgp desktop	eq	10.0.1
symantec:pgp_desktop	symantec pgp desktop	eq	10.0.2
symantec:pgp_desktop	symantec pgp desktop	eq	10.0.3
symantec:pgp_desktop	symantec pgp desktop	eq	10.1.0
symantec:pgp_desktop	symantec pgp desktop	eq	10.1.1
symantec:pgp_desktop	symantec pgp desktop	eq	10.1.2