The issue allows context-dependent attackers to bypass intended access restrictions by leveraging an unintended security configuration after a software update. This occurs because a certain administrative system-preferences setting is not preserved across updates.