CVE-2011-3462

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-02-02 · updated 2026-06-16

Description

Time Machine in Apple Mac OS X before 10.7.3 does not verify the unique identifier of its remote AFP volume or Time Capsule, which allows remote attackers to obtain sensitive information contained in new backups by spoofing this storage object, a different vulnerability than CVE-2010-1803.

Affected products

macOS: through 10.7.2; 10.7.0, 10.7.1
Apple Mac Os X Server: through 10.7.2; 10.7.0, 10.7.1

References

http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
http://support.apple.com/kb/HT5130
http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
http://support.apple.com/kb/HT5130

Get alerted when CVE-2011-3462 or the next vulnerability affects your stack