CVE-2015-6980

High

Published: 11/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors.

Risk Assessment

This vulnerability may lead to unauthorized access to the system by local users, posing a serious threat to data security.

Recommendation

It is recommended to update the system to version 10.11.1 or later to mitigate this vulnerability.

Other vulnerabilities in Directory Utility

CVE-2017-13872High
An issue was discovered in certain Apple products, including macOS High Sierra before Security Update 2017-001, related to the 'Directory Utility' component. It allows attackers to obtain administrator access without a password via certain interactions involving entry of the root user name.

Original NVD description (English source)

Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors.