CVE-2017-2402

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of profile uninstall actions in the "MCX Client" component when a profile has multiple payloads. It allows remote attackers to bypass intended access restrictions by leveraging Acti...

CVE-2017-2402

Concrete details found: CVE-2017-2402 affects macOS Sierra 10.12.3 MCX Client. The issue arises in profile uninstall when a configuration profile has multiple payloads, where Active Directory certificate trust that should have been removed may remain, allowing bypass of access restrictions. The A...