CVE-2010-0534

Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated users to publish content via HTTP requests.

• CWE-264

• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlVendor Advisory
• http://support.apple.com/kb/HT4077Patch, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlVendor Advisory
• http://support.apple.com/kb/HT4077Patch, Vendor Advisory

Published

Mar 30, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0528Apple QuickTime before 7.6.6 on Windows allows remote attack…
• CVE-2010-0529Heap-based buffer overflow in QuickTime.qts in Apple QuickTi…
• CVE-2010-0530Apple QuickTime before 7.6.9 on Windows sets weak permission…
• CVE-2010-0531Apple iTunes before 9.1 allows remote attackers to cause a d…
• CVE-2010-0532Race condition in the installation package in Apple iTunes b…
• CVE-2010-0533Directory traversal vulnerability in AFP Server in Apple Mac…
• CVE-2010-0535Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos …
• CVE-2010-0536Apple QuickTime before 7.6.6 on Windows allows remote attack…
• CVE-2010-0537DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does no…
• CVE-2010-0538Apple Java for Mac OS X 10.5 before Update 7 and Java for Ma…
• CVE-2010-0539Integer signedness error in the window drawing implementatio…
• CVE-2010-0540Cross-site request forgery (CSRF) vulnerability in the web i…