Medium severity5.3NVD Advisory· Published Sep 25, 2016· Updated Jun 17, 2026
CVE-2016-4745
CVE-2016-4745
Description
The Kerberos 5 (aka krb5) PAM module in Apple OS X before 10.12 does not use constant-time operations for determining username validity, which makes it easier for remote attackers to enumerate user accounts via a timing side-channel attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <10.12
Patches
Vulnerability mechanics
References
4- lists.apple.com/archives/security-announce/2016/Sep/msg00006.htmlnvdMailing ListVendor Advisory
- support.apple.com/HT207170nvdVendor Advisory
- www.securityfocus.com/bid/93055nvd
- www.securitytracker.com/id/1036858nvd
News mentions
0No linked articles in our index yet.