CVE-2010-0534

Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated users to publish content via HTTP requests.

Score

CVSS 2.0 4.0 Medium

Status

Modified - product-security@apple.com

Published

2010-03-30

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Mac Os X (Apple)
• Mac Os X Server (Apple)

References

• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
• http://support.apple.com/kb/HT4077