For those MAC users running High Sierra

Status
Not open for further replies.
Joined
Apr 9, 2015
Messages
1,258
You have a major bug that allows anyone who knows about it to login as an ADMIN without a password.


https://arstechnica.com/information...ou-log-in-as-admin-with-no-password-required/
In one of Apple's biggest security blunders in years, a bug in macOS High Sierra allows untrusted users to gain unfettered administrative control without any password.

The bypass works by putting the word "root" (without the quotes) in the user name field of a login window, moving the cursor into the password field, and then hitting enter button with the password field empty. With that—after a few tries in some cases—the latest version of Apple's operating system logs the user in with root privileges. Ars reporters were able to replicate the behavior multiple times on three Macs. The flaw isn't present previous macOS versions.
 

Ericloewe

Server Wrangler
Moderator
Joined
Feb 15, 2014
Messages
20,060
*sad tuba*
 
Status
Not open for further replies.
Top