Vulnerability in Apple Mac OS X

CVE-2005-2520

The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.

EPSS: 0.004 (32.0th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x — versions 10.4, 10.4.1, 10.4.2
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (vendor-advisory, x_refsource_APPLE, Patch, Vendor Advisory)
cve@mitre.org (vendor-advisory, x_refsource_APPLE, Patch, Vendor Advisory)