Vulnerability Details CVE-2011-0197
App Store in Apple Mac OS X before 10.6.8 creates a log entry containing a user's AppleID password, which might allow local users to obtain sensitive information by reading a log file, as demonstrated by a log file that has non-default permissions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.5%
CVSS Severity
CVSS v2 Score 2.1
References
Products affected by CVE-2011-0197
-
cpe:2.3:o:apple:mac_os_x:10.5.8
-
cpe:2.3:o:apple:mac_os_x:10.6.0
-
cpe:2.3:o:apple:mac_os_x:10.6.1
-
cpe:2.3:o:apple:mac_os_x:10.6.2
-
cpe:2.3:o:apple:mac_os_x:10.6.3
-
cpe:2.3:o:apple:mac_os_x:10.6.4
-
cpe:2.3:o:apple:mac_os_x:10.6.5
-
cpe:2.3:o:apple:mac_os_x:10.6.6
-
cpe:2.3:o:apple:mac_os_x:10.6.7
-
cpe:2.3:o:apple:mac_os_x_server:10.5.8
-
cpe:2.3:o:apple:mac_os_x_server:10.6.0
-
cpe:2.3:o:apple:mac_os_x_server:10.6.1
-
cpe:2.3:o:apple:mac_os_x_server:10.6.2
-
cpe:2.3:o:apple:mac_os_x_server:10.6.3
-
cpe:2.3:o:apple:mac_os_x_server:10.6.4
-
cpe:2.3:o:apple:mac_os_x_server:10.6.5
-
cpe:2.3:o:apple:mac_os_x_server:10.6.6
-
cpe:2.3:o:apple:mac_os_x_server:10.6.7