7.5

CVE-2009-2192

MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a "logic issue."

Data is provided by the National Vulnerability Database (NVD)
Apple ≫ Mac Os X Version10.5.6
Apple ≫ macOS X Version10.5
Apple ≫ macOS X Version10.5.0
Apple ≫ macOS X Version10.5.1
Apple ≫ macOS X Version10.5.2
Apple ≫ macOS X Version10.5.2 Update2008-002
Apple ≫ macOS X Version10.5.3
Apple ≫ macOS X Version10.5.4
Apple ≫ macOS X Version10.5.5
Apple ≫ macOS X Version10.5.6
Apple ≫ macOS X Version10.5.7
Apple ≫ macOS X Server Version10.5
Apple ≫ macOS X Server Version10.5.0
Apple ≫ macOS X Server Version10.5.1
Apple ≫ macOS X Server Version10.5.2
Apple ≫ macOS X Server Version10.5.3
Apple ≫ macOS X Server Version10.5.4
Apple ≫ macOS X Server Version10.5.5
Apple ≫ macOS X Server Version10.5.6
Apple ≫ macOS X Server Version10.5.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.35% 0.542
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
http://support.apple.com/kb/HT3757
Patch
Vendor Advisory