Os X Server CVE-2014-4447

LOW

Cryptographic Issues (CWE-310)

2014-10-18 product-security@apple.com

Apple Information Disclosure Os X Server

1.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

1.9 LOW

AV:L/AC:M/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:P/I:N/A:N

Attack Vector

Local

Attack Complexity

M

Confidentiality

P

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Oct 18, 2014 - 01:55 cve.org

LOW 1.9

DescriptionCVE.org

Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile setup or (2) profile edit occurs.

AnalysisAI

Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile setup or (2) profile edit occurs. Rated low severity (CVSS 1.9). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-310. Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile setup or (2) profile edit occurs. Affected products include: Apple Os X Server. Version information: before 4.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Os X Server

View all

CVE-2014-3583 MEDIUM This Month

The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows rem

CVE-2016-4694 CRITICAL Act Now

The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefo

CVE-2014-4424 HIGH This Week

SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x before 3.2.1 a

CVE-2016-4754 HIGH This Week

ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat

CVE-2013-5143 MEDIUM This Month

The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspecified cir

CVE-2014-4406 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.1 allows r

CVE-2015-1151 MEDIUM This Month

Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and Peop

CVE-2015-1150 MEDIUM This Month

The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows r

CVE-2013-1034 MEDIUM This Month

Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote at

CVE-2014-4446 LOW Monitor

Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows r

Same weakness CWE-310 – Cryptographic Issues

View all

CVE-2015-0204 MEDIUM POC

CVE-2015-4000 LOW POC

CVE-2014-3566 LOW POC

CVE-2014-8684 CRITICAL POC

CVE-2012-1803 HIGH POC

CVE-2013-4787 CRITICAL POC

CVE-2014-8686 CRITICAL POC

CVE-2013-0137 CRITICAL

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2014-4447 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy