CVEvulnerability
CVE-2012-0652
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-05-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-200
Description
Login Window in Apple Mac OS X 10.7.3, when Legacy File Vault or networked home directories are enabled, does not properly restrict what is written to the system log for network logins, which allows local users to obtain sensitive information by reading the log.
Affected configurations
• apple mac os x 10.7.3
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://lists.apple.com/archives/security-announce/2012/May/msg00001.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html lists.apple.com
- http://support.apple.com/kb/HT5281 Vendor Advisory
- http://support.apple.com/kb/HT5501 support.apple.com
- http://www.securityfocus.com/bid/53445 www.securityfocus.com
- http://www.securityfocus.com/bid/53457 www.securityfocus.com
- http://www.securitytracker.com/id?1027024 www.securitytracker.com
- http://lists.apple.com/archives/security-announce/2012/May/msg00001.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html lists.apple.com
- http://support.apple.com/kb/HT5281 Vendor Advisory
- http://support.apple.com/kb/HT5501 support.apple.com
- http://www.securityfocus.com/bid/53445 www.securityfocus.com
- http://www.securityfocus.com/bid/53457 www.securityfocus.com
- http://www.securitytracker.com/id?1027024 www.securitytracker.com