Science

MacOS High Sierra unlocks App Store Preferences with any password

MacOS High Sierra unlocks App Store Preferences with any password”

A bug has been discovered in macOS 10.13.2 that allows you to unlock the App Store system preferences using any username and password as long as you are logged in as a local admin. The App Store settings are also unlocked by default, meaning the password would only be requested if the user has clicked on the padlock icon to prevent settings being changed.

In November previous year, a serious "root" flaw was discovered in macOS High Sierra that allowed anyone to log into the admin account simply by using the username "root" with a blank password after repeatedly clicking on the login button multiple times.

The impact is small as it's only preferences for one application and, to get to it, you need to log into the operating system - and that password layer seems just fine.

The macOS High Sierra 10.13.2 update improves the stability, compatibility and security of your Mac.

More news: Employment key to better future, Economists tell Modi ahead of Budget

Download macOS High Sierra from the App Store for free at the link below.

While the discovery of the flaw may be alarming for some Mac users, the potential for it to be exploited in an attack is perhaps limited.

The flaw allows anyone with access to your Mac to enter any password in the App Store section of the System Preferences app which clearly shouldn't happen. If it is unlocked, lock it and then try unlocking it using your username and any password. The flaw follows a series of notable security bugs that shipped in recent weeks including the notorious root access flaw that allowed anyone to access critical account settings and more. That would leave those flaws exploitable on the machine. Apple has reportedly already fixed the bug in beta versions of the next macOS High Sierra update.



Like this

loading...
loading...

Latest


11 January 2018
Player Grades: OKC Thunder torn apart by the Timberwolves
He did a little bit of everything with 26 points, seven rebounds, eight assists, four steals, and two blocks on the night. Minnesota had its fifth consecutive sellout, the first time for the franchise since March 21-April 4, 2004.

11 January 2018
Ford F-150 Diesel: Release Date, Specs, Price
The vehicle will come with a price tag between $2,400 and $4,000 more than its petrol alternative. The F-150 Powerstroke can carry 2,020 pounds of cargo, or tow 11,400 pounds.

11 January 2018
Makar declines invite from Team Canada Olympic team
The fourth overall pick by the Colorado Avalanche last summer, Makar is now enrolled at the University of Massachusetts-Amherst. Hockey Canada is expected to announce its roster Thursday at 2 p.m.

11 January 2018
Jay Bruce will reportedly sign with Mets
Bruce, 30, is a.249 career hitter with 277 home runs over 10 seasons with the Cincinnati Reds , Mets and Cleveland Indians . According to reports , free agent Jay Bruce signed a three-year deal with the New York Mets worth $39 million.

11 January 2018
Come to table and assist in fight against terrorism: US to Pakistan
The US announced on Thursday that it would not deliver military equipment or transfer security-related funds to Pakistan . Trump has called Pakistan a safe haven for terrorists.

11 January 2018
Ex-sheriff Arpaio to run for Senate in Arizona
Over the years, he flirted with running for Arizona governor no fewer than five times before demurring and abandoning the idea. The Republican Flake has been critical of Trump and announced past year that he would not seek another term.

11 January 2018
Black Widow Solo Movie Reportedly Moving Forward At Marvel
Those details may still be being finalized, so we'll have to wait for more information on where Black Widow will go. In a Vanity Fair piece , Marvel Studios Kevin Feige said the studio has "20 movies on the docket".

11 January 2018
Samsung's Upcoming Smartphones Will Have Active FM Chips
LG announced recently that it was going to unlock the FM chips on its handsets a few months back in partnership with NextRadio . An FM radio chip is available in most phones, but it's typically.

11 January 2018
$3.12 EPS Expected for Ameriprise Financial, Inc. (AMP)
Ameriprise Financial, Inc is a financial services company that offers financial solutions to individual and institutional clients. Ig Mgmt Ltd, Manitoba - Canada-based fund reported 8,057 shares. 45,955 were reported by Punch & Associate Invest Mngmt Inc.

11 January 2018
Earnings Estimates Analysis of: The Boeing Company (BA), PayPal Holdings, Inc. (PYPL)
After $0.34 actual EPS reported by PayPal Holdings, Inc. for the previous quarter, Wall Street now forecasts 11.76 % EPS growth. And despite their recent rally (PYPL surged 86.5% last year), the analyst isn't too concerned about Paypal's rising valuation.