CVE-1999-1076
MediumExploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
The idle locking function in MacOS 9 allows local users to bypass password protection of locked sessions. A user can select the 'Log Out' option and then 'Cancel' in the dialog box, which returns them to the locked session.
Risk Assessment
The organization may be exposed to unauthorized access to locked sessions, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update the operating system to a newer version that addresses this vulnerability and to implement additional security measures to protect user sessions.
Original NVD description (English source)
Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the "Log Out" option and selecting a "Cancel" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session.