Vulnerability CVE-2014-4425
Published: 2014-10-17   Modified: 2014-10-18

Description:
CFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after sleep or screen saver begins" setting, which makes it easier for physically proximate attackers to obtain access by leveraging an unattended workstation.

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.6/10
6.4/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Apple -> Mac os x 

 References:
https://support.apple.com/kb/HT6535
http://xforce.iss.net/xforce/xfdb/97640
http://www.securitytracker.com/id/1031063
http://www.securityfocus.com/bid/70630
http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
Copyright 2024, cxsecurity.com

 

Back to Top