Apple OS X before 10.10.5 does not properly implement authentication, which allows local users to obtain admin privileges via unspecified vectors.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/76340 | vdb entry |
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html | vendor advisory |
https://support.apple.com/kb/HT205031 | vendor advisory |
http://www.securitytracker.com/id/1033276 | vdb entry |