Description
Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved.
References (3)
Core 3
Core References
Patch, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/8266
Patch, Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=25631
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/12728
Scores
EPSS
0.0150
EPSS Percentile
71.7%
Details
Status
published
Products (7)
apple/mac_os_x_server
10.2
apple/mac_os_x_server
10.2.1
apple/mac_os_x_server
10.2.2
apple/mac_os_x_server
10.2.3
apple/mac_os_x_server
10.2.4
apple/mac_os_x_server
10.2.5
apple/mac_os_x_server
10.2.6
Published
Mar 29, 2004
Tracked Since
Feb 18, 2026