![[Bug] macOS High Sierra App Store Preferences Can Be Unlocked Without a Password](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhh9G-6qwXTnwyxYrtRS-d8LJChgFY4PVGFDmSKZICeecAdGKKYBgHtHqWzSfCmng2Kz5L-5Rb1d4tOo6xXyqiUMOE6FzqG0Cf0g2LgcYmIoF9KLe1dFWuOMxSeXSB2mZcq2fIk22TinQ4/s790-rw-e365/macOS-high-sierra-password-unlock.png)
[Bug] macOS High Sierra App Store Preferences Can Be Unlocked Without a Password
Jan 11, 2018
Yet another password vulnerability has been uncovered in macOS High Sierra, which unlocks App Store System Preferences with any password (or no password at all). A new password bug has been discovered in the latest version of macOS High Sierra that allows anyone with access to your Mac to unlock App Store menu in System Preferences with any random password or no password at all. The impact of this vulnerability is nowhere as serious as the previously disclosed root login bug in Apple's desktop OS that enabled access to the root superuser account simply by entering a blank password on macOS High Sierra 10.13.1. As reported on Open Radar earlier this week, the vulnerability impacts macOS version 10.13.2 and requires the attacker to be logged in with an administrator-level account for this vulnerability to work. I checked the bug on my fully updated Mac laptop, and it worked by entering a blank password as well as any random password. If you're running latest macOS ...
