This should unlock the App Store preference for you. Click the padlock to unlock settings, enter your admin username and any random password, and click Unlock. Then, head to System Preferences and click on the App Store icon. In order to reproduce the bug, a user can start by logging in as an admin. SEE: Information security incident reporting policy (Tech Pro Research)
Second, the ability to unlock these preferences with any password is only available to local admins, and standard user accounts aren't affected. First, this flaw only seems to affect High Sierra version 10.13.2-the current available version at the time of this writing. If an attacker is able to open App Store preferences, they are also able to disable automatic downloads of macOS security and app updates, leaving victims vulnerable in the future.Īccording to the report, there are two important things to consider. While this may seem trivial to some, this flaw could have future security implications for users. First noted in a security report on Open Radar, admins can punch in literally any password to gain access.
0 kommentar(er)
