CVE-2015-1150: Apple OS X Server

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions by sending packets for which custom-rule blocking was intended.

Affected products

• Apple OS X Server: up to and including 4.0

Published 2015-04-28. Last modified 2026-06-17.