Description
mdmclient in Mobile Device Management in Apple Mac OS X before 10.8.5 places a password on the command line, which allows local users to obtain sensitive information by listing the process.
References
- APPLE-SA-2013-09-12-1 vendor-advisory
- http://support.apple.com/kb/HT5880