Description
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information.
References (5)
Scores
CVSS v3
5.5
EPSS
0.0015
EPSS Percentile
35.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-459
Status
published
Products (3)
pgp/corporate_desktop
7.1
pgp/freeware
7.0.3
pgp/personal_security
7.0.3
Published
Aug 12, 2002
Tracked Since
Feb 18, 2026