CVE-2012-0656 in Mac OS X

Summary

Race condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account is enabled, allows physically proximate attackers to login to arbitrary accounts by entering the account name and no password.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 01/12/2012
• Disclosure: 05/10/2012
• Moderation: VulDB entry created
• Entries: VDB-60724 (1)
• CPE: ready
• CWE: CWE-362 (Confirmed)
• CVSS: 8.4
• EPSS: 0.00115
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-0656
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-0656
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-0656/