CVE-2002-0788 — Incomplete Cleanup in Corporate Desktop

CWE-459 — Incomplete Cleanup3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.2%
top 63.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
PGP Corporate DesktopPGP FreewarePGP Personal Security
Timeline
PublishedAug 12
Latest updateApr 30

Description

An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶NVDpgp/freeware7.0.3

Patches

Patch: archives.neohapsis.com ↗Patch: www.iss.net ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-fjc3-77q6-8ffr: An interaction between PGP 7↗2022-04-30
▶

📐Framework References

1
CWE
Incomplete Cleanup↗
▶