CVE-2014-1265

CWE-2643 documents3 sources
Severity
4.6MEDIUM
EPSS
0.1%
top 83.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MAC OS XApple MAC OS X Server
Timeline
PublishedFeb 27
Latest updateMay 17

Description

The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intended access restrictions by changing the current time on the system clock.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages2 packages

▶NVDapple/mac_os_x10.9.1+13
▶NVDapple/mac_os_x_server6 versions+5

🔴Vulnerability Details

2
GHSA
GHSA-72g6-46mf-fpq2: The systemsetup program in the Date and Time subsystem in Apple OS X before 10↗2022-05-17
▶
CVEList
CVE-2014-1265: The systemsetup program in the Date and Time subsystem in Apple OS X before 10↗2014-02-27
▶
CVE-2014-1265 (MEDIUM CVSS 4.6) | The systemsetup program in the Date | cvebase.io