CVEvulnerability

CVE-2001-0435

4.6 MEDIUM Published 2001-07-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-07-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate.

Affected configurations

• pgp pgp 7.0

References