125 matches found
CVE-2024-4395 Lack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation
The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation...
Jamf Compliance Editor Security Vulnerability
Jamf Compliance Editor is a tool from Jamf-Concepts Individual Developers that provides macOS, iOS/iPadOS system administrators with an easy way to establish and manage compliance baselines on their Apple device queues. A security vulnerability exists in versions of Jamf Compliance Editor prior t...
PT-2024-30811 · Jamf · Jamf Compliance Editor
Name of the Vulnerable Software and Affected Versions: Jamf Compliance Editor versions prior to 1.3.1 Description: The issue concerns a local privilege escalation in the XPC service within the audit functionality of Jamf Compliance Editor on macOS. Recommendations: For versions prior to 1.3.1,...
CVE-2023-31224
There is broken access control during authentication in Jamf Pro Server before 10.46.1...
CVE-2023-31224
There is broken access control during authentication in Jamf Pro Server before 10.46.1...
CVE-2023-31224
There is broken access control during authentication in Jamf Pro Server before 10.46.1...
Improper access control
There is broken access control during authentication in Jamf Pro Server before 10.46.1...
Jamf Pro Security Vulnerability
Jamf Pro is an Apple device management solution from Jamf USA. A security vulnerability exists in Jamf Pro Server versions prior to 10.46.1, which stems from an access control corruption during the authentication process...
CVE-2023-31224
Jamf Pro Server before 10.46.1 has a broken access control issue in authentication. Affected product: Jamf Pro Server (pre-10.46.1). Root cause: improper access control during the authentication process. Impact: high confidentiality, integrity, and availability per CVE-2023-31224. Remediation: up...
CVE-2023-31224
There is broken access control during authentication in Jamf Pro Server before 10.46.1...
PT-2023-23245 · Jamf · Jamf Pro Server
Name of the Vulnerable Software and Affected Versions: Jamf Pro Server versions prior to 10.46.1 Description: The issue is related to broken access control during authentication. Recommendations: For Jamf Pro Server versions prior to 10.46.1, update to version 10.46.1 or later to resolve the issu...
Microsoft Warns of Fake Skills Assessment Portals Targeting IT Job Seekers
A sub-cluster within the infamous Lazarus Group has established new infrastructure that impersonates skills assessment portals as part of its social engineering campaigns. Microsoft attributed the activity to a threat actor it calls Sapphire Sleet, describing it as a "shift in the persistent...
Insight JAMF integration - Error when Importing
h3. Issue Summary The Assets - Jamf Integration|https://marketplace.atlassian.com/apps/1219908/assets-jamf-integration?tab=overview&hosting=datacenter plugin supported by Atlassian seems to retrieve an error on the importing process "could not connect to service". h3. Steps to Reproduce The...
Details Released for Recently Patched new macOS Archive Utility Vulnerability
Security researchers have shared details about a now-addressed security flaw in Apple's macOS operating system that could be potentially exploited to run malicious applications in a manner that can bypass Apple's security measures. The vulnerability, tracked as CVE-2022-32910, is rooted in the...
Interested in Reducing Your Risk Profile? Jamf Has a Solution for That
The threat landscape has changed dramatically over the past decade. While cybercriminals continue to look for new ways to gain access to networks and steal sensitive information, the mobile attack surface is also expanding. Mobile devices are not only becoming more powerful but also more vulnerab...
CVE-2022-29564
Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user can reach a system in the internal infrastructure, aka WND-44801...
CVE-2022-29564
Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user can reach a system in the internal infrastructure, aka WND-44801...
CVE-2022-29564
Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user can reach a system in the internal infrastructure, aka WND-44801...