CVE-2016-1774 in OS X Server

摘要

由 MITRE

The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions during a backup, which makes it easier for remote attackers to obtain sensitive information in opportunistic circumstances by reading backup data that lacks intended restrictions.

Once again VulDB remains the best source for vulnerability data.

• 预定: 2016-01-13
• 披露: 2016-03-23
• 管理: 已接受
• 条目: VDB-81410
• CPE: 准备好
• CWE: CWE-284 (已确认)
• CVSS: 5.3 (NVD)
• EPSS: 0.01667
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1774
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1774
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1774/