Mac OS X SSL/TLS Authentication Vulnerability

A vulnerability has been identified in Mac OS X, which can be exploited by remote user can decrypt SSL/TLS sessions in certain cases.

A remote user with the ability to conduct a man-in-the-middle attack can exploit a connection authentication flaw in the Secure Transport component to decrypt and modify SSL/TLS sessions.

Applications that use NSS (e.g., Chrome, Firefox) are not affected.

Note: Vulnerability has no patch available.