About the security content of Security Update 2017-001 - Apple Support

🗓️ 02 Dec 2017 04:57:38Reported by AppleType

Security Update 2017-001 released for macOS High Sierra 10.13 and 10.13.1, addressing a logic error in administrator authentication

Reporter	Title	Published	Views	Family All 25
0day.today	Apple macOS 10.13.1 High Sierra - Blank Root Local Privilege Escalation Vulnerability	9 Dec 201700:00	–	zdt
Tenable Nessus	macOS 10.13.x < 10.13.2 Multiple Vulnerabilities (Meltdown)	10 Apr 201900:00	–	nessus
Tenable Nessus	MacOS 10.13 root Authentication Bypass (Security Update 2017-001)	28 Nov 201700:00	–	nessus
Tenable Nessus	macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-002 and 2017-005)	7 Dec 201700:00	–	nessus
Tenable Nessus	macOS 10.13.x < 10.13.2 Multiple Vulnerabilities (Meltdown)	7 Dec 201700:00	–	nessus
Tenable Nessus	macOS 10.13 Authentication Bypass Remote Check (CVE-2017-13872)	4 Dec 201700:00	–	nessus
Tenable Nessus	macOS 10.13 root Authentication Bypass Direct Check	29 Nov 201700:00	–	nessus
Apple	About the security content of macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan	6 Dec 201700:00	–	apple
Apple	About the security content of Security Update 2017-001	29 Nov 201700:00	–	apple
Apple	About the security content of macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan - Apple Support	27 Jul 202008:21	–	apple

02 Dec 2017 04:57Current

7.7High risk

Vulners AI Score7.7

CVSS 38.1

CVSS 29.3

EPSS0.76664