Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote attackers to obtain sensitive information by leveraging the lack of a WEP password for a Wi-Fi network.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://support.apple.com/kb/HT5130 | vendor advisory |
http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html | vendor advisory |