Apple OS X kSecRevocationRequirePositiveResponse Markup Handling Vulnerability

Apple OS X is an operating system developed by Apple Inc. The Apple OS X kSecRevocationRequirePositiveResponse flag is specified but not implemented, allowing a trust evaluation configured to request a revocation check to potentially succeed even if the revocation check fails. A local attacker...