CVE-2007-5862 — Improper Authentication in Apple MAC OS X

CWE-287 — Improper Authentication2 documents2 sources
Severity
9.4CRITICALNVD
EPSS
0.3%
top 46.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple MAC OS X
Timeline
PublishedDec 18
Latest updateMay 1

Description

Java in Mac OS X 10.4 through 10.4.11 allows remote attackers to bypass Keychain access controls and add or delete arbitrary Keychain items via a crafted Java applet.

CVSS vector

AV:N/AC:L/C:C/I:C/A:NExploitability: 10.0 | Impact: 9.2

Affected Packages1 packages

▶NVDapple/mac_os_x12 versions+11

Patches

Patch: secunia.com ↗Patch: www.securityfocus.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-5g4m-52c9-q9f8: Java in Mac OS X 10↗2022-05-01
▶