Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile setup or (2) profile edit occurs.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Os_x_server |
Apple |
* |
3.1.2 (including) |
References