CoreCVE
Back

LOW

The MCX Desktop Config Profiles implementation in Apple OS X before 10.10 retains web-proxy settings from uninstalled mobile-configuration profiles, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging access to an unintended proxy server

Published Oct 18, 2014

Description

The MCX Desktop Config Profiles implementation in Apple OS X before 10.10 retains web-proxy settings from uninstalled mobile-configuration profiles, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging access to an unintended proxy server.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (2)

CWE-16

CWE-200

Exposure of Sensitive Information

References (5)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Oct 18, 2014
Updated Aug 6, 2024
Reserved Jun 20, 2014
Link CVE-2014-4440
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2014-4440
Red Hat
Severity n/a
Public date n/a
Links CVE-2014-4440