CVE-2012-3720 — Apple MAC OS X vulnerability

CWE-2552 documents2 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 53.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple MAC OS X
Timeline
PublishedSep 20
Latest updateMay 17

Description

Mobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 saves password hashes for external-account use even if external accounts are not enabled, which might allow remote attackers to determine passwords via unspecified access to a mobile account.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/mac_os_x10.7.4+72

🔴Vulnerability Details

1
GHSA
GHSA-mjgq-g7x8-c24g: Mobile Accounts in Apple Mac OS X before 10↗2022-05-17
▶