CVEvulnerability

CVE-2002-1696

5.5 MEDIUM Published 2002-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-312

Description

Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked, and the user replies to an encrypted message.

Affected configurations

• pgp personal privacy 7.0 • pgp personal privacy 7.0.3 • pgp personal privacy 7.0.4

Related

Weakness · CWE (1)

  • CWE-312 Cleartext Storage of Sensitive Information weakness

Referenced by CWE · observed example (2)

  • CWE-312 Cleartext Storage of Sensitive Information weakness
  • CWE-313 Cleartext Storage in a File or on Disk weakness

References