Apple MacOS High Sierra Security Bug

Problem

As reported yesterday, there’s a major security flaw in Apple’s newest operating system, High Sierra. The bug allows anyone to gain complete administrative access to the computer when using “root” as the username with a blank password. Berkeley Lab’s Cybersecurity team has released this information, Apple OSX High Sierra 10.13 authentication bug.

Solution

Apple has released an updated labeled Security Update 2017-001, https://support.apple.com/en-us/HT208315. Ensure you install the update.

BigFix Deployed Apple Update

As of this 11/30/2017 AM, we had some users who had not installed the Apple security update. BigFix discovered these systems and installed the update automatically.