Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary. Rated medium severity (CVSS 4.4). No vendor patch available.
Privilege Escalation
Apple
Itunes
NVD
CVSS 2.0
4.4
EPSS
0.1%