CVE-2014-4425

Published: Oct 18, 2014Modified: May 6, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

CFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after sleep or screen saver begins" setting, which makes it easier for physically proximate attackers to obtain access by leveraging an unattended workstation.

Affected (1)

Products: Apple: Mac Os X

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Up to 10.9.5

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (10)

http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html

Source: product-security@apple.com

http://www.securityfocus.com/bid/70630

Source: product-security@apple.com

http://www.securitytracker.com/id/1031063

Source: product-security@apple.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/97640

Source: product-security@apple.com

https://support.apple.com/kb/HT6535

Source: product-security@apple.com

Vendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/70630

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031063

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/97640

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT6535

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.