CVE Daily

CVE-2011-3444

Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypt...

Medium CVSS 4.3

Overview

Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.

CWE: CWE-310 Published: 2012-02-02T18:55:01.037
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.3 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags