CVE-2015-3672 in Mac OS X

Résumé

par MITRE

Admin Framework in Apple OS X before 10.10.4 does not properly handle authentication errors, which allows local users to obtain admin privileges via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 07/05/2015
• Divulgation: 02/07/2015
• Modérer: accepté
• Entrée: VDB-76186
• CPE: prêt
• CWE: CWE-284 (confirmé)
• CVSS: 7.2 (NVD)
• EPSS: 0.00384
• KEV: non
• Activités: très faible
• Secteur: Pharma, Lawfirm, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-3672
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-3672
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-3672/