Enable and set root account to a chosen password on unpatched macOS High Sierra hosts with either Screen Sharing or Remote Management enabled.
93618f0baeb5c0e067ea241b7e1873b7821075be229823de87b392c83e276231
Apple Security Advisory 2017-12-6-1 - macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan are now available and address issues in apache, curl, and more.
3918e25736c0918763ac137433051db5b4a68c6701db5e97911b5001522fb8e4
Apple Security Advisory 2017-11-29-2 - An attacker may be able to bypass administrator authentication without supplying the administrator's password Description: A logic error existed in the validation of credentials. This was addressed with improved credential validation.
d1caeb89bf3189579b272d84f58ff120543420c9d279bc6f03bbd20691276039
Apple Security Advisory 2017-11-29-1 - An attacker may be able to bypass administrator authentication without supplying the administrator's password. A logic error existed in the validation of credentials. This was addressed with improved credential validation. suffers from a bypass vulnerability.
f4201e73331165b83356487e95a29618e9ff1f2c9a834f1343b9b62ace030047