NVD

Id
84280  
Name
CVE-2017-2402  
Description
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of profile uninstall actions in the MCX Client component when a profile has multiple payloads. It allows remote attackers to bypass intended access restrictions by leveraging Active Directory certificate trust that should not have remained.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-04-01  
Modified Date
2017-07-11  
Seq
2017-2402  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
413084 84280 CVE-2015-4407 http://www.hikvision.com/En/Press-Release-details_435_i1023.html  View
416829 84280 CVE-2017-0207 97463  View
416830 84280 CVE-2017-0207 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0207  View
416831 84280 CVE-2017-0207 97463  View
416832 84280 CVE-2017-0207 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0207  View

Related JVN