CVE-2012-0652

{"id": "CVE-2012-0652", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-05-11T03:49:58.840", "references": [{"url": "http://lists.apple.com/archives/security-announce/2012/May/msg00001.html", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html", "source": "product-security@apple.com"}, {"url": "http://support.apple.com/kb/HT5281", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "http://support.apple.com/kb/HT5501", "source": "product-security@apple.com"}, {"url": "http://www.securityfocus.com/bid/53445", "source": "product-security@apple.com"}, {"url": "http://www.securityfocus.com/bid/53457", "source": "product-security@apple.com"}, {"url": "http://www.securitytracker.com/id?1027024", "source": "product-security@apple.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Login Window in Apple Mac OS X 10.7.3, when Legacy File Vault or networked home directories are enabled, does not properly restrict what is written to the system log for network logins, which allows local users to obtain sensitive information by reading the log."}, {"lang": "es", "value": "La ventana de acceso en Apple Mac OS X v10.7.3, cuando Legacy File Vault o cuando los directorios home en red red est\u00e1n habilitados, no restringe adecuadamente lo que se escribe en el registro del sistema para las conexiones de red, que permite a usuarios locales obtener informaci\u00f3n sensible mediante la lectura del registro."}], "lastModified": "2017-12-05T02:29:02.700", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:10.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A82DEF28-B061-44B3-AF9B-BE529DB457D9"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}