OSVDB ID: 29273 Title: Apple Mac OS X Preferences Account Manipulation WebObjects Application Privilege Persistence |
Info |
|
|
Dates |
||||
|
|
Description |
Mac OS X contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the account option "Allow user to administer this computer" is unchecked, but the user is not removed from the appserveradm or appserverusr groups. This flaw may allow a non-administrative user to administer WebObjects applications, leading to a loss of integrity. |
Classification |
Location:
Local Access Required
Attack Type: Authentication Management, Misconfiguration Impact: Loss of Integrity Exploit: Exploit Unknown Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Apple has released a patch to address this vulnerability. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |