An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of profile uninstall actions in the "MCX Client" component when a profile has multiple payloads. It allows remote attackers to bypass intended access restrictions by leveraging Active Directory certificate trust that should not have remained.

References

• https://nvd.nist.gov/vuln/detail/CVE-2017-2402
• https://support.apple.com/HT207615
• http://www.securityfocus.com/bid/97140
• http://www.securitytracker.com/id/1038138