Lucene search

K
cve[email protected]CVE-2014-4425
HistoryOct 18, 2014 - 1:55 a.m.

CVE-2014-4425

2014-10-1801:55:12
CWE-287
web.nvd.nist.gov
19
cve-2014-4425
cfpreferences
apple
os x
security vulnerability
password protection

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.7%

CFPreferences in Apple OS X before 10.10 does not properly enforce the “require password after sleep or screen saver begins” setting, which makes it easier for physically proximate attackers to obtain access by leveraging an unattended workstation.

Affected configurations

NVD
Node
applemac_os_xRange10.9.5
CPENameOperatorVersion
apple:mac_os_xapple mac os xle10.9.5

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.7%