Security Advisory

CVE-2011-0178

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-03-23 01:00:00
Last updated 2024-09-17 00:46:27
Assigner apple
CVSS score not scored
State PUBLISHED

Description

The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory.