⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2015-3671

HIGH · 7.2 CVSS Gepubliceerd: 03-07-2015 CWE-284

Beschrijving

Admin Framework in Apple OS X before 10.10.4 does not properly verify XPC entitlements, which allows local users to bypass authentication and obtain admin privileges via unspecified vectors.

Vendors

Apple

Affected products

Mac Os X

References

lists.apple.com
support.apple.com
www.securityfocus.com
www.securitytracker.com