CVE-2007-3184

macOS X - Unauthenticated System Preferences Modification via Apple Menu Invocation

Title source: llm

Description

Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify System Preferences, including passwords, by invoking the Apple Menu when the Access Control Server (ACS) produces a user notification message after posture validation.

References (9)

Core 9

Core References

Broken Link vdb-entry x_refsource_osvdb

http://www.osvdb.org/35340

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/471041/100/0/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1018217

Exploit, Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/2796

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_response09186a008085d645.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/25598

Patch, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/24415

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/34807

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/2140

Scores

EPSS 0.0063

EPSS Percentile 45.5%

Details

CWE

CWE-287

Status published

Products (1)

apple/mac_os_x

Published Jun 12, 2007

Tracked Since Feb 18, 2026