Cannot Delete Suspicious Password Entry from Safari Passwords (OSX / iOS)

Originator:reda
Number:rdar://18835323 Date Originated:
Status:Open Resolved:
Product:Safari Product Version:8.0
Classification:Security Reproducible:Did Not Try
 
Summary:
A suspicious entry (origin unknown) in the list of saved passwords in Safari cannot be deleted (see attached screen capture).

The entry is synced across devices (Mavericks, Yosemite, iOS 8) using iCloud keychain and cannot be removed from any device.

Message from the Console.app:

31/10/14 9:39:15.832 AM Safari[1355]: ERROR: attempt to delete a credential for a protection space that has no host-name.  Failing operation.

Steps to Reproduce:
It is unclear how this can be reproduced as it is unclear how that password entry got added in the first place.

Expected Results:
Should be able to delete the suspicious entry.

Actual Results:
Not able to delete the suspicious entry.

Version:
Version 7.1 (9537.85.10.17.1)
Mobile Safari
Version 8.0

Notes:


Configuration:
Reproduced on:

- Mavericks 10.9.5, Safari 7.1, iCloud Keychain turned on or off
- Yosemite 10.10, Safari 8.0, iCloud Keychain turned on or off
- iOS 8.1 on iPad 3

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!