Lemi Orhan Ergin이 트위터로

macOS high sierra에 심각한 취약점을 공개했습니다.

 

원트윗

 

Dear @AppleSupport, we noticed a HUGE security issue at MacOS High Sierra. Anyone can login as "root" with empty password after clicking on login button several times. Are you aware of it @Apple?

트위에 의하면 로긴시 로긴 버튼을 여러번 누른후 root를 사용자에 넣고 빈 패스워드를 넣으면 로긴이 됩니다. 

추가: https://9to5mac.com/2017/11/28/how-to-set-root-password/

CHANGING ROOT PASSWORD ON MACOS HIGH SIERRA

Step 1 | Launch System Preferences

Step 2 | Select Users & Groups

Step 3 | Select Login Options

Step 4 | Select Join next to Network Account Server

Step 5 | Select Open Directory Utility

Step 6 | In the menu bar of Directory Utility, select Change Root Password

Step 7 | Create a strong, unique password

9to5mac이 애플 패치전 임시방편을 공개 했습니다.