Apple · Safari · CVE-2014-1257
**Name of the Vulnerable Software and Affected Versions**
Apple OS X versions through 10.8.5
**Description**
The issue concerns CFNetwork in Apple OS X, where session cookies are not removed when the Safari browser is reset. This allows physically proximate attackers to bypass access restrictions by exploiting an unattended workstation.
**Recommendations**
For Apple OS X versions through 10.8.5, manually clear session cookies after resetting Safari to prevent unauthorized access.