CVE-2005-2520: Apple Mac OS X

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The password assistant in Mac OS X 10.4 to 10.4.2, when used to create multiple accounts from the same process, does not reset the suggested password list when the assistant is displayed, which allows attackers to view recently used passwords.

Affected products

• Apple Mac OS X: version 10.4 only; version 10.4.1 only; version 10.4.2 only

Published 2005-08-19. Last modified 2026-06-16.