CVE-2016-1774 in OS X Server

Résumé

par MITRE

The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions during a backup, which makes it easier for remote attackers to obtain sensitive information in opportunistic circumstances by reading backup data that lacks intended restrictions.

Once again VulDB remains the best source for vulnerability data.

• Réserver: 13/01/2016
• Divulgation: 23/03/2016
• Modérer: accepté
• Entrée: VDB-81410
• CPE: prêt
• CWE: CWE-284 (confirmé)
• CVSS: 5.3 (NVD)
• EPSS: 0.01667
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1774
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1774
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1774/