CVE-2021-30125

Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376...

CVE-2021-40809

An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows...

CVE-2021-39303

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vulnerability...

CVE-2019-17076

An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Service DoS, remote code execution RCE, and/or deletion of files on the Jamf Pro server...

CVE-2024-10183

A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges to root on MacOS systems...

CVE-2024-10183 Arbitrary File Write Vulnerability in Jamf Remote Assist Leading to Privilege Escalation

A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges to root on MacOS systems...

CVE-2024-10183 Arbitrary File Write Vulnerability in Jamf Remote Assist Leading to Privilege Escalation

A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges to root on MacOS systems...

CVE-2024-10183

CVE-2024-10183 describes an arbitrary file write vulnerability in Jamf Pro’s Jamf Remote Assist tool that enables a local, non-privileged user to escalate privileges to root on macOS. The connected sources confirm the affected component and the privilege-escalation impact, but do not provide conc...

Jamf Pro 安全漏洞

Jamf Pro is an Apple device management solution from Jamf USA. A security vulnerability exists in Jamf Pro that stems from a flaw in the Jamf Remote Assist tool that allows a local, unprivileged user to elevate their privileges to root privileges on MacOS systems...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

Improper access control

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

Jamf Pro Security Vulnerability

Jamf Pro is an Apple device management solution from Jamf USA. A security vulnerability exists in Jamf Pro Server versions prior to 10.46.1, which stems from an access control corruption during the authentication process...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2023-31224

Jamf Pro Server before 10.46.1 has a broken access control issue in authentication. Affected product: Jamf Pro Server (pre-10.46.1). Root cause: improper access control during the authentication process. Impact: high confidentiality, integrity, and availability per CVE-2023-31224. Remediation: up...

PT-2023-23245 · Jamf · Jamf Pro Server

Name of the Vulnerable Software and Affected Versions: Jamf Pro Server versions prior to 10.46.1 Description: The issue is related to broken access control during authentication. Recommendations: For Jamf Pro Server versions prior to 10.46.1, update to version 10.46.1 or later to resolve the issu...

Shopify: XSS at jamfpro.shopifycloud.com

An XSS vulnerability was discovered in the instance of Jamf Pro running on https://jamfpro.shopifycloud.com due to the old Swagger-UI being exposed at /classicapi/doc/. An attacker could have crafted a URL to introduce an XSS payload and execute arbitrary JS code in the context of the application...

CVE-2021-40809

An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows...

CVE-2021-40809

An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows...