SecurityAgent in Apple OS X prior to 10.11.1 does not prevent synthetic clicks from reaching keychain windows, which allows malicious users to bypass intended access restrictions via a crafted app.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apple mac os x |