Lucene search

K
cveAppleCVE-2015-5833
HistoryOct 09, 2015 - 5:59 a.m.

CVE-2015-5833

2015-10-0905:59:04
CWE-254
apple
web.nvd.nist.gov
37
cve-2015-5833
apple os x
login window
security vulnerability
screen lock
unauthorized access

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

25.1%

The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation.

Affected configurations

Nvd
Node
applemac_os_xRange10.10.5
VendorProductVersionCPE
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

25.1%