CVE-2018-4170

CVE-2018-4170 affects macOS High Sierra prior to 10.13.4 (Admin Framework). A local attacker could disclose passwords by listing the sysadminctl process and its command-line arguments, which included the password parameter. Apple mitigated this in macOS 10.13.4 Security Update 2018-002 (and relat...