CVE-2014-4425
Last modified
CVE-2014-4425 is a vulnerability of currently unknown severity. CFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after sleep or screen saver begins" setting, which makes it easier for physically proximate attackers to obtain access by leveraging an unattended workstation.. EPSS estimates a 0.35% chance of exploitation in the next 30 days.
Description
CFPreferences in Apple OS X before 10.10 does not properly enforce the "require password after sleep or screen saver begins" setting, which makes it easier for physically proximate attackers to obtain access by leveraging an unattended workstation.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | <= 10.9.5 |
References
- https://support.apple.com/kb/HT6535Vendor Advisory
- https://support.apple.com/kb/HT6535Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-4425?
How severe is CVE-2014-4425?
How do I fix CVE-2014-4425?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-4419The network-statistics interface in the kernel in Apple iOS …
- CVE-2014-4420The network-statistics interface in the kernel in Apple iOS …
- CVE-2014-4421The network-statistics interface in the kernel in Apple iOS …
- CVE-2014-4422The kernel in Apple iOS before 8 and Apple TV before 7 uses …
- CVE-2014-4423The Accounts subsystem in Apple iOS before 8 allows attacker…
- CVE-2014-4424SQL injection vulnerability in Wiki Server in CoreCollaborat…
- CVE-2014-4426AFP File Server in Apple OS X before 10.10 allows remote att…
- CVE-2014-4427App Sandbox in Apple OS X before 10.10 allows attackers to b…
- CVE-2014-4428Bluetooth in Apple OS X before 10.10 does not require encryp…
- CVE-2014-4429Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-4430CoreStorage in Apple OS X before 10.10 retains a volume's en…
- CVE-2014-4431Dock in Apple OS X before 10.10 does not properly manage the…
Are you affected by CVE-2014-4425?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST