Lucene search

K
cve[email protected]CVE-2015-1130
HistoryApr 10, 2015 - 2:59 p.m.

CVE-2015-1130

2015-04-1014:59:00
CWE-254
web.nvd.nist.gov
842
In Wild
cve-2015-1130
xpc implementation
admin framework
apple os x
authentication bypass
admin privileges
nvd

8 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

15.8%

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.

CPENameOperatorVersion
apple:mac_os_xapple mac os xle10.10.2

8 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

15.8%