CVE-2014-4446

Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass…

published October 18, 2014

CVSS
—
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a change made by an administrator.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01417 · 72.6th percentile
Published
2014-10-18T01:00Z
EPSS history
Timeline
  • 18 OCT 01:00Z
    Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass…
    cvelistv5