Apple fixes macOS bug that allowed access to App Store options with incorrect password

Apple has fixed a bug in the latest beta of macOS High Sierra. The bug allowed users to enter a random password to access users’ App Store preferences. The bug doesn’t have much impact.

Users running the latest stable version of High Sierra, 10.13.2, are susceptible to the vulnerability, MacRumors writes based on an OpenRadar report. The bug makes it possible to enter any password to access App Store preferences.

The impact of the bug is limited, as changing most options afterwards still requires the correct password. It is possible to change preferences regarding automatic updates of apps.

Apple has fixed the bug in the third beta of the next version of High Sierra. It is unknown when the stable version will be released. It’s not the first password bug to come out in High Sierra. For example, with an apfs volume, the operating system gave the full password as a hint and was found to circumvent the password prompt by entering ‘root’ as the user without a password. Apple has already fixed both bugs.