7.2

CVE-2007-3184

Exploit

Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.

Data is provided by the National Vulnerability Database (NVD)
Apple ≫ macOS X
   Cisco ≫ Trust Agent Version < 2.1.104.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.09% 0.269
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://securityreason.com/securityalert/2796
Third Party Advisory
Exploit
http://www.securityfocus.com/bid/24415
Patch
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1018217
Third Party Advisory
VDB Entry