CVE-2010-0534: Medium severity Apple Mac OS X Server vulnerability
Published Mar 30, 2010
·Updated
Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated users to publish content via HTTP requests.
Affected Software
6 affected components
Apple Mac OS X Server=10.6.1
Apple Mac OS X Server=10.6.2
Apple iOS and macOS=10.6.1
Apple Mac OS X Server=10.6.0
Apple iOS and macOS=10.6.0
Apple iOS and macOS=10.6.2
Remediation
Patch Available
Event History
Mar 30, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0534?
CVE-2010-0534 has a moderate severity level due to its potential for unauthorized content publication.
2
How do I fix CVE-2010-0534?
To mitigate CVE-2010-0534, upgrade Apple Mac OS X to version 10.6.3 or later.
3
Who is affected by CVE-2010-0534?
CVE-2010-0534 affects users of Apple Mac OS X versions 10.6.0, 10.6.1, and 10.6.2.
4
What does CVE-2010-0534 allow an attacker to do?
CVE-2010-0534 allows remote authenticated users to publish content via HTTP requests without proper access control.
5
Is CVE-2010-0534 relevant to all versions of Mac OS X?
No, CVE-2010-0534 is specifically relevant to Mac OS X versions prior to 10.6.3.