VULNERABILITY INTELLIGENCE

CVE-2008-3610

CVSS score7.6 HIGH
EPSS probability2.04%
CISA KEVNot currently listed
Published2008-09-16
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password account is enabled, allows attackers to bypass password authentication and login to any account via multiple attempts to login to the blank-password account, followed by selection of an arbitrary account from the user list.

Weakness classification

  • CWE-287: Improper Authentication

Primary references