CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.1. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2014-4446
Severity
LOW
CVSS
2.1
EPSS
1.42%
Original NVD Description
Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a change made by an administrator.