CVE Feed

    Dashboard / CVE / CVE-2014-4447

    CVE-2014-4447

    Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading a file after a (1) profile setup or (2) profile edit occurs.

    Published:Oct 18, 2014
    Last Modified:Apr 12, 2025
    EPS:Oct 18, 2014
    EPSS Score:0.00142
    CVSS Score:1.9

    Affected Products

    Vendor
    Apple
    Product
    Os X Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-4754 (CVSS 7.5) — ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers …
    CVE-2016-4694 (CVSS 9.1) — The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 a…
    CVE-2015-1151 (CVSS 5) — Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activit…
    CVE-2015-1150 (CVSS 5) — The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, whic…
    CVE-2014-4446 (CVSS 2.1) — Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, whic…
    CVE-2014-3583 (CVSS 5) — The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 …
    CVE-2014-4424 (CVSS 7.5) — SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x befo…
    CVE-2014-4406 (CVSS 6.1) — Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.…
    CVE-2013-5143 (CVSS 6.8) — The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspe…
    CVE-2013-1034 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High