9.8

CVE-2017-2402

EPSS 0.25%
Veröffentlicht 02.04.2017 01:59:01
Zuletzt bearbeitet 13.05.2026 00:24:29
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of profile uninstall actions in the "MCX Client" component when a profile has multiple payloads. It allows remote attackers to bypass intended access restrictions by leveraging Active Directory certificate trust that should not have remained.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 6

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ macOS X Version <= 10.12.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.25%	0.453

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.securitytracker.com/id/1038138

http://www.securityfocus.com/bid/97140

Third Party Advisory

VDB Entry

https://support.apple.com/HT207615

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-2402

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-2402

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-2402

EUVD