Profile Manager in Apple Mac OS X before 10.7.5 does not properly perform authentication for the Device Management private interface, which allows attackers to enumerate managed devices via unspecified vectors.
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html