Apple · Macos High Sierra · CVE-2017-13872
**Name of the Vulnerable Software and Affected Versions**
macOS High Sierra before Security Update 2017-001
**Description**
The issue involves the Directory Utility component, allowing attackers to obtain administrator access without a password via certain interactions involving entry of the root user name.
**Recommendations**
For macOS High Sierra before Security Update 2017-001, apply Security Update 2017-001 to resolve the issue.