Jamf Pro security vulnerabilities

Jamf Pro is an Apple device management solution from Jamf USA. A security vulnerability exists in Jamf Pro that stems from a flaw in the Jamf Remote Assist tool that allows a local, unprivileged user to elevate their privileges to root privileges on MacOS systems...

CVE-2024-4395

The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation...

CVE-2024-4395

The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation...

CVE-2024-4395 Lack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation

The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation...

CVE-2024-4395

The CVE-2024-4395 issue affects Jamf Compliance Editor for macOS prior to version 1.3.1, where the XPC service used by the audit functionality can enable local privilege escalation. The root cause is within the backup/audit XPC service, allowing an attacker with local access and low privileges to...

CVE-2024-4395 Lack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation

The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation...

CVE-2024-4395: Improper Privilege Management

The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation...

Jamf Compliance Editor Security Vulnerability

Jamf Compliance Editor is a tool from Jamf-Concepts Individual Developers that provides macOS, iOS/iPadOS system administrators with an easy way to establish and manage compliance baselines on their Apple device queues. A security vulnerability exists in versions of Jamf Compliance Editor prior t...

PT-2024-30811 · Jamf · Jamf Compliance Editor

Name of the Vulnerable Software and Affected Versions: Jamf Compliance Editor versions prior to 1.3.1 Description: The issue concerns a local privilege escalation in the XPC service within the audit functionality of Jamf Compliance Editor on macOS. Recommendations: For versions prior to 1.3.1,...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

Improper access control

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2023-31224

Jamf Pro Server before 10.46.1 has a broken access control issue in authentication. Affected product: Jamf Pro Server (pre-10.46.1). Root cause: improper access control during the authentication process. Impact: high confidentiality, integrity, and availability per CVE-2023-31224. Remediation: up...

CVE-2023-31224

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

CVE-2023-31224: Improper Authentication

There is broken access control during authentication in Jamf Pro Server before 10.46.1...

PT-2023-23245 · Jamf · Jamf Pro Server

Name of the Vulnerable Software and Affected Versions: Jamf Pro Server versions prior to 10.46.1 Description: The issue is related to broken access control during authentication. Recommendations: For Jamf Pro Server versions prior to 10.46.1, update to version 10.46.1 or later to resolve the issu...

Jamf Pro Security Vulnerability

Jamf Pro is an Apple device management solution from Jamf USA. A security vulnerability exists in Jamf Pro Server versions prior to 10.46.1, which stems from an access control corruption during the authentication process...

Microsoft Warns of Fake Skills Assessment Portals Targeting IT Job Seekers

A sub-cluster within the infamous Lazarus Group has established new infrastructure that impersonates skills assessment portals as part of its social engineering campaigns. Microsoft attributed the activity to a threat actor it calls Sapphire Sleet, describing it as a "shift in the persistent...

Insight JAMF integration - Error when Importing

h3. Issue Summary The Assets - Jamf Integration|https://marketplace.atlassian.com/apps/1219908/assets-jamf-integration?tab=overview&hosting=datacenter plugin supported by Atlassian seems to retrieve an error on the importing process "could not connect to service". h3. Steps to Reproduce The...