CVE

CVE-2015-1130

Apple OS X Authentication Bypass Vulnerability

Apple · OS X

Date added (CISA)

2022-02-10

Remediation due

2022-08-10

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges.