← Database

CVE-2008-4215

HIGH CVSS: 7.5 Published: 2008-10-10 Modified: 2026-06-16

Description

Weblog in Mac OS X Server 10.4.11 does not properly check an error condition when a weblog posting access control list is specified for a user that has multiple short names, which might allow attackers to bypass intended access restrictions.

Affected Platforms

Apple Mac Os X Server

Weakness Type

CWE-264

References