CVE-2014-1257 Information

Description

CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action which allows physically proximate attackers to bypass intended access restrictions by leveraging an unattended workstation.

Reference

http://support.apple.com/kb/HT6150