CVE-2006-4399Apple MAC OS X vulnerability

2 documents2 sources
Severity
2.1LOWNVD
EPSS
0.2%
top 55.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 3
Latest updateMay 1

Description

User interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 appears to allow administrators to change the authentication type from crypt to ShadowHash passwords for accounts in a NetInfo parent, when such an operation is not actually supported, which could result in less secure password management than intended.

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

NVDapple/mac_os_x8 versions+7

Patches

🔴Vulnerability Details

1
GHSA
GHSA-7xhc-rgq8-m3rw: User interface inconsistency in Workgroup Manager in Apple Mac OS X 102022-05-01