VulnerabilityModified
CVE-2014-4425
CFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after sleep or screen saver begins" setting, which makes it easier for physically proximate attackers to obtain access by leveraging an unattended workstation.
MEDIUM 4.6EPSS 0.35%
Does this matter?
Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.
Description
CFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after sleep or screen saver begins" setting, which makes it easier for physically proximate attackers to obtain access by leveraging an unattended workstation.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.35% probability · 28th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- apple/mac os x
- Source
- product-security@apple.com
References
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
- http://www.securityfocus.com/bid/70630
- http://www.securitytracker.com/id/1031063
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97640
- https://support.apple.com/kb/HT6535Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
- http://www.securityfocus.com/bid/70630
- http://www.securitytracker.com/id/1031063
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97640
- https://support.apple.com/kb/HT6535Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.