CVE-2001-0435: Pgp

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate.

Affected products

• Pgp Pgp: version 7.0 only

Published 2001-07-02. Last modified 2026-06-16.