CVE-2014-1380 - CERT CVE
ID CVE-2014-1380
Sažetak The Security - Keychain component in Apple OS X before 10.9.4 does not properly implement keystroke observers, which allows physically proximate attackers to bypass the screen-lock protection mechanism, and enter characters into an arbitrary window under the lock window, via keyboard input.
Reference
CVSS
Base: 2.6
Impact: 4.9
Exploitability:1.9
Pristup
VektorSloženostAutentikacija
LOCAL HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL NONE
CVSS vektor AV:L/AC:H/Au:N/C:P/I:P/A:N
Zadnje važnije ažuriranje 22-12-2015 - 18:56
Objavljeno 01-07-2014 - 10:17