VULNERABILITY INTELLIGENCE
CVE-2010-0524
CVSS score7.5 HIGH
EPSS probability1.32%
CISA KEVNot currently listed
Published2010-03-30
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message.