CVE-2014-4440

The MCX Desktop Config Profiles implementation in Apple OS X before 10.10 retains web-proxy settings from uninstalled mobile-configuration profiles, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging access to an unintended proxy server...

CVE-2014-4440

CVE-2014-4440 affects Apple OS X (pre-10.10) MCX Desktop Config Profiles. The vulnerability arises because web-proxy settings from mobile configuration profiles remain after uninstallation, allowing a remote attacker with access to an unintended proxy server to obtain sensitive information. The i...