Description
Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated users to publish content via HTTP requests.
References
- APPLE-SA-2010-03-29-1 vendor-advisory
- http://support.apple.com/kb/HT4077