Description
The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1014707
Patch, Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
Patch, Vendor Advisory vendor-advisory
x_refsource_apple
http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
Scores
EPSS
0.0039
EPSS Percentile
32.0%
Details
Status
published
Products (3)
apple/mac_os_x
10.4
apple/mac_os_x
10.4.1
apple/mac_os_x
10.4.2
Published
Aug 19, 2005
Tracked Since
Feb 18, 2026