VDB

GCVE-110-CERTCC-2017-113765

GCVE-110-CERTCC-2017-113765
Advisory PublishedCVSS 7.2/10
Vulnetix · Advisory published November 13, 2017
Apple MacOS High Sierra fails to properly require authentication for disabled accounts, such as root account, which can allow an authenticated user to obtain root privileges.
Download JSON Open in Console

Risk Scores

CVSS 2.0
7.2/10
High · AV:L/AC:L/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact4d1_population3d1_direct_report0
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score6.2remediation_levelWreport_confidenceCenvironmental_score4.584607521984target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2017-13872

References

Apple MacOS High Sierra disabled account authentication bypass
url
Apple MacOS High Sierra disabled account authentication bypass
url
Apple MacOS High Sierra disabled account authentication bypass
advisory
Apple MacOS High Sierra disabled account authentication bypass
advisory

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›