CVE-2011-3462

Опубликовано: 02 фев. 2012

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive information contained in new backups by spoofing this storage object, a different vulnerability than CVE-2010-1803.

Ссылки

http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
Vendor Advisory
http://support.apple.com/kb/HT5130
Vendor Advisory
http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
Vendor Advisory
http://support.apple.com/kb/HT5130
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.7.2 (включая)

cpe:2.3:o:apple:mac_os_x:10.7.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.7.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*

Версия до 10.7.2 (включая)

cpe:2.3:o:apple:mac_os_x_server:10.7.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x_server:10.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00236

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-r3mj-74qm-pv3m

github

больше 3 лет назад