Vulnerability in Apple Mac OS X
CVE-2011-3212
CoreStorage in Apple Mac OS X 10.7 before 10.7.2 does not ensure that all disk data is encrypted during the enabling of FileVault, which makes it easier for physically proximate attackers to obtain sensitive information by reading directly from the disk device.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x — versions 10.7.0, 10.7.1
- Apple Mac_os_x_server — versions 10.7.0, 10.7.1
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (x_refsource_OSVDB, vdb-entry)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (x_refsource_CONFIRM)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE)
- product-security@apple.com (vdb-entry, x_refsource_BID)