CVE-2015-1147: Apple Mac OS X

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

• Apple Mac OS X: before 10.10.3 (fixed in 10.10.3)

Published 2015-04-10. Last modified 2026-06-17.