CVE-2017-7149 : An issue was discovered in certain Apple products. macOS before 10.13 Supplement

An issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is affected. The issue involves the "StorageKit" component. It allows attackers to discover passwords for APFS encrypted volumes by reading Disk Utility hints, because the stored hint value was accidentally set to the password itself, not the entered hint value.

Published 2017-10-23 01:29:14

Updated 2019-10-03 00:03:26

Source Apple Inc.

View at NVD, CVE.org

Products affected by CVE-2017-7149

Apple » Mac Os X
Versions up to, including, (<=) 10.13
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2017-7149

EPSS FAQ

0.18%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 54 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-7149

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2017-7149

https://support.apple.com/HT208165

About the security content of macOS High Sierra 10.13 Supplemental Update - Apple Support
Vendor Advisory

CVEs referencing this url
https://www.theregister.co.uk/2017/10/05/apple_patches_password_hint_bug_that_revealed_password/

Dumb bug of the week: Apple's macOS reveals your encrypted drive's password in the hint box • The Register
Exploit;Press/Media Coverage;Third Party Advisory
https://hackernoon.com/new-macos-high-sierra-vulnerability-exposes-the-password-of-an-encrypted-apfs-container-b4f2f5326e79

New macOS High Sierra vulnerability exposes the password of an encrypted APFS container - By Matheus Mariano
Exploit;Third Party Advisory
http://www.securityfocus.com/bid/101178

Apple macOS CVE-2017-7149 Local Unauthorized Access Vulnerability
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1039513

Apple macOS/OS X Disk Utility Hint Field Lets Local Users View the Password for an Encrypted APFS Volume - SecurityTracker
Third Party Advisory;VDB Entry
https://nakedsecurity.sophos.com/2017/10/05/urgent-update-your-mac-again-right-now/

Crazy but true – Apple’s “show hint” button reveals your actual password – Naked Security
Exploit;Technical Description;Third Party Advisory

Jump to

Vulnerability Details : CVE-2017-7149

Products affected by CVE-2017-7149

Exploit prediction scoring system (EPSS) score for CVE-2017-7149

CVSS scores for CVE-2017-7149

References for CVE-2017-7149