PT-2012-4960

CVE-2012-3720

·

Published

2012-09-20

·

Updated

2012-09-21

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.7.5 Mac OS X versions 10.8.x prior to 10.8.2
Description The issue allows remote attackers to potentially determine passwords via unspecified access to a mobile account, as password hashes for external-account use are saved even if external accounts are not enabled.
Recommendations For Mac OS X versions prior to 10.7.5, update to version 10.7.5 or later. For Mac OS X versions 10.8.x prior to 10.8.2, update to version 10.8.2 or later.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-255
Related identifiers
CVE-2012-3720
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com