Description
An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Admin Framework" component. It allows local users to discover a password by listing a process and its arguments during sysadminctl execution.
References
- https://support.apple.com/HT208692
- 103582 vdb-entry
- 1040608 vdb-entry