CVE-2017-13872 An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the "Directory Utility" component. It allows attackers to obtain ad...
HighCVSS 8.1
EPSS 36.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the "Directory Utility" component. It allows attackers to obtain administrator access without a password via certain interactions involving entry of the root user name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x | = 10.13.0 | No fix listed |
| apple mac os x | = 10.13.1 | No fix listed |
References
- 101981 third-party-advisory vdb-entry
- 1039875 third-party-advisory vdb-entry
- arstechnica.com mitigation third-party-advisory
- github.com
- objective-see.com exploit technical-description third-party-advisory
- support.apple.com vendor-advisory
- support.apple.com
- 43201 exploit third-party-advisory vdb-entry
- 43248 exploit
- www.wired.com press-media-coverage third-party-advisory