VULNERABILITY INTELLIGENCE

CVE-2010-1838

CVSS score4.4 MEDIUM
EPSS probability0.67%
CISA KEVNot currently listed
Published2010-11-15
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P

Description

Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle errors associated with disabled mobile accounts, which allows remote attackers to bypass authentication by providing a valid account name.

Weakness classification

  • CWE-287: Improper Authentication

Primary references