Security Advisory

CVE-2014-1347

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-05-18 10:00:00

Last updated 2024-08-06 09:34:41

Assigner apple

CVSS score not scored

State PUBLISHED

Description

Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations.

← Browse all CVEs View on cve.org ↗