CVE-2012-0652

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-05-11 · updated 2026-06-16
Weakness: CWE-200

Description

Login Window in Apple Mac OS X 10.7.3, when Legacy File Vault or networked home directories are enabled, does not properly restrict what is written to the system log for network logins, which allows local users to obtain sensitive information by reading the log.

Affected products

macOS: 10.7.3

References

http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
http://support.apple.com/kb/HT5281
http://support.apple.com/kb/HT5501
http://www.securityfocus.com/bid/53445
http://www.securityfocus.com/bid/53457
http://www.securitytracker.com/id?1027024
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
http://support.apple.com/kb/HT5281
http://support.apple.com/kb/HT5501
http://www.securityfocus.com/bid/53445

Get alerted when CVE-2012-0652 or the next vulnerability affects your stack