4.3

CVE-2014-3431

Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.

Data is provided by the National Vulnerability Database (NVD)
Symantec ≫ Encryption Desktop Version10.3.0 SwEditionprofessional
   Apple ≫ macOS X
Symantec ≫ Encryption Desktop Version10.3.1 SwEditionprofessional
   Apple ≫ macOS X
Symantec ≫ Encryption Desktop Version10.3.2 Update- SwEditionprofessional
   Apple ≫ macOS X
Symantec ≫ Encryption Desktop Version10.3.2 Updatemp1 SwEditionprofessional
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version10.0.0
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version10.0.1
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version10.0.2
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version10.0.3
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version10.1.0
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version10.1.1
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version10.1.2
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version10.2.0
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version10.2.1
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version10.2.2
   Apple ≫ macOS X
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.078
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 3.1 6.4
AV:L/AC:L/Au:S/C:P/I:P/A:P