CVE Vulnerabilities

CVE-2011-3436

Published: Oct 14, 2011 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation.

Affected Software

Name Vendor Start Version End Version
Mac_os_x Apple 10.7.0 (including) 10.7.0 (including)
Mac_os_x Apple 10.7.1 (including) 10.7.1 (including)
Mac_os_x_server Apple 10.7.0 (including) 10.7.0 (including)
Mac_os_x_server Apple 10.7.1 (including) 10.7.1 (including)

References