VULNERABILITY INTELLIGENCE

CVE-2010-0522

CVSS score9 HIGH

EPSS probability2.04%

CISA KEVNot currently listed

Published2010-03-30

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing.

Primary references

product-security@apple.com — Vendor Advisory
product-security@apple.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory