SecurityAgent in Apple OS X before 10.11.1 does not prevent synthetic clicks from reaching keychain windows, which allows attackers to bypass intended access restrictions via a crafted app.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Mac_os_x | Apple | * | 10.11.0 (including) |
References