CVE-2017-7149

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13 Supplemental Update

Description The issue involves the StorageKit component, allowing attackers to discover passwords for APFS encrypted volumes. This is possible by reading Disk Utility hints, as the stored hint value was accidentally set to the password itself, not the entered hint value.

Recommendations For macOS versions prior to 10.13 Supplemental Update, update to macOS 10.13 Supplemental Update or later to resolve the issue. As a temporary workaround, consider avoiding the use of the Disk Utility hints feature for APFS encrypted volumes until the update is applied.