One Mac user allowed to access a *different* Mac user's session?!

Discussion in 'Accessing your Mac' started by nmcapaz, Oct 1, 2013.

  1. nmcapaz

    nmcapaz Bit poster

    In my experience trying out Parallels Access on a free trial as a PD9 user, I was amazed to discover that when setting the Parallels Access agent's Advanced settings to "Ask for my Mac OS X user name and password as well", a username/password was indeed required, but apparently it can be *any* user, regardless of whose desktop session is currently being accessed.

    This seems like a horrible security vulnerability for an inherently multi-user OS such as OS X. Am I missing something? Was this really the intended behavior?

    MatthewR20 likes this.
  2. Eugene@Parallels

    Eugene@Parallels Banned

    Hello nmcapaz,

    Thank you for reporting the issue. We have transferred the case to our Product Maintenance Team through the internal request.

Share This Page