CVE-2002-1977 — The UI Performs the Wrong Action in PGP

CWE-449 — The UI Performs the Wrong Action3 documents3 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 76.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
PGP
Timeline
PublishedDec 31
Latest updateApr 30

Description

Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDpgp/pgp7.0.4, 7.1+1

Patches

Patch: www.iss.net ↗Patch: www.iss.net ↗

🔴Vulnerability Details

1
GHSA
GHSA-8pc2-hpvr-6f94: Network Associates PGP 7↗2022-04-30
▶

📐Framework References

1
CWE
The UI Performs the Wrong Action↗
▶