Security Advisory

CVE-2014-4446

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-10-18 01:00:00
Last updated 2024-08-06 11:12:35
Assigner apple
State PUBLISHED

Description

Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a change made by an administrator.