9.8
CVSSv3

CVE-2017-2402

Published: 02/04/2017 Updated: 03/10/2019
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

An issue exists in certain Apple products. macOS prior to 10.12.4 is affected. The issue involves mishandling of profile uninstall actions in the "MCX Client" component when a profile has multiple payloads. It allows remote malicious users to bypass intended access restrictions by leveraging Active Directory certificate trust that should not have remained.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apple mac os x