Security Advisory
CVE-2016-4745
5.3
MEDIUM
Vulnerability Description
The Kerberos 5 (aka krb5) PAM module in Apple OS X before 10.12 does not use constant-time operations for determining username validity, which makes it easier for remote attackers to enumerate user accounts via a timing side-channel attack.
Published Date
September 25, 2016
Official Source
NIST NVD Advisory