CVE-2008-4215: Apple Mac OS X Server

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Weblog in Mac OS X Server 10.4.11 does not properly check an error condition when a weblog posting access control list is specified for a user that has multiple short names, which might allow attackers to bypass intended access restrictions.

Affected products

• Apple Mac OS X Server: version 10.4.11 only

Published 2008-10-10. Last modified 2026-06-16.