CVE-2002-1977: Pgp

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the "Passphrase Cache" option, which could allow attackers to open encrypted files without providing a passphrase.

Affected products

• Pgp Pgp: version 7.0.4 only; version 7.1 only

Published 2002-12-31. Last modified 2026-06-16.