Apple has revealed a Passwords app vulnerability that lasted for months