Information disclosure in macOS Server - CVE-2016-4754

Vulnerability identifier: #VU594

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-4754

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to obtain potentially sensitive information on the target system.
The weakness is caused by using the obsolete RC4 algorithm for ServerDocs Server connections that leads to connection decryption.
Successful exploitation of the vulnerability may result in access to potentially sensitive data on the vulnerable system.

macOS Server

Update to 5.2.

• https://support.apple.com/en-us/HT207171

• Information disclosure in Apple MAC OS X Server