CVE-2014-4447 Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile setup or (2) profile edit occurs.
LowCVSS 1.9
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile setup or (2) profile edit occurs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple os x server | <= 3.1.2 | No fix listed |
References
- APPLE-SA-2014-10-16-3 vendor-advisory
- 1031071 vdb-entry
- macosx-cve20144447-info-disc(97646) vdb-entry
- support.apple.com vendor-advisory