7.2

CVE-2007-3184

Exploit
Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ macOS X
   Cisco ≫ Trust Agent Version < 2.1.104.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.63% 0.453
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://secunia.com/advisories/25598
Third Party Advisory
http://securityreason.com/securityalert/2796
Third Party Advisory
Exploit
http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html
Vendor Advisory
http://www.osvdb.org/35340
Broken Link
http://www.securityfocus.com/archive/1/471041/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/24415
Patch
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1018217
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/2140
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34807
Third Party Advisory
VDB Entry