PT-2011-2159
CVE-2011-0178
·
Published
2011-03-23
·
Updated
2011-03-24
Description by
CVSS 2.0
2.1
LowMetricsAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Mac OS X versions prior to 10.6.7
Description
The issue allows local users to obtain potentially sensitive information by accessing a world-readable directory provided by the FSFindFolder API in response to a call with the kTemporaryFolderType flag.
Recommendations
For versions prior to 10.6.7, update to Mac OS X version 10.6.7 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾