CVE-2013-5191: The syslog implementation in Apple Mac OS X before 10.9 allows local users to obtain sensitive information...

Security readout for executives and security teams

On Macs before OS X 10.9, Guest users could read console log messages left from earlier Guest sessions. If those logs contained sensitive details, a person with local Guest access could see them. The provided sources describe a confidentiality issue, not remote compromise. Exposure is limited to Apple Mac OS X systems before 10.9 where the Guest account is enabled or otherwise accessible. Risk is highest on shared, kiosk, lab, or loaner Macs where untrusted people can use Guest sessions. Prioritize as low urgency unless the organization still operates pre-10.9 Macs with Guest access in shared environments. The business impact is mainly accidental exposure of local log data, not broad network compromise. Mitigation focus: Inventory any Mac OS X systems older than 10.9.; Check Apple advisory APPLE-SA-2013-10-22-3 for supported update guidance.; Disable or restrict Guest account access until systems are remediated..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.