VULNERABILITY INTELLIGENCE

CVE-2014-4425

CVSS score4.6 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2014-10-18
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

CFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after sleep or screen saver begins" setting, which makes it easier for physically proximate attackers to obtain access by leveraging an unattended workstation.

Weakness classification

  • CWE-287: Improper Authentication

Primary references