The File Systems component in Apple Mac OS X before 10.7.2 does not properly track the specific X.509 certificate that a user manually accepted for an initial https WebDAV connection, which allows man-in-the-middle attackers to hijack WebDAV communication by presenting an arbitrary certificate for a subsequent connection.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2011-10-14T10:00:00

Updated: 2024-08-06T23:29:55.994Z

Reserved: 2011-08-19T00:00:00

Link: CVE-2011-3213

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2011-10-14T10:55:08.387

Modified: 2025-04-11T00:51:21.963

Link: CVE-2011-3213

cve-icon Redhat

No data.