CVE-2011-3436

published 2011-10-14

CVE-2011-3436: Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote…

medium 6.5 CVSS 3.1

AV N AC L Au S C P I P A P

Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
apple	mac_os_x	—	—
apple	mac_os_x	—	—
apple	mac_os_x_server	—	—
apple	mac_os_x_server	—	—

CWE-264