JAMF Jamf Pro code issue vulnerability

JAMF Jamf Pro is an Apple device management solution from Jamf America JAMF. A security vulnerability exists in Jamf Pro that stems from an issue discovered in Jamf Pro prior to 10.32.0, PI-009921, where incorrect privileges may be granted to an account in response to authentication using a...

PT-2021-22955

Name of the Vulnerable Software and Affected Versions Jamf Pro versions prior to 10.32.0 Description An issue has been discovered where an account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows. Recommendations For Jamf Pro versions prior to...

CVE-2021-39303

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vulnerability...

CVE-2021-39303

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vulnerability...

Server side request forgery (ssrf)

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vulnerability...

CVE-2021-39303

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vulnerability...

CVE-2021-39303

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vulnerability...

CVE-2021-39303

The CVE-2021-39303 entry concerns a server-side request forgery (SSRF) in the Jamf Pro server prior to 10.32.0 (PI-006352). Multiple sources identify the affected product as Jamf Pro and confirm the vulnerability exists on the server before the 10.32.0 release. The CVSS data in the NVD entry show...

CVE-2021-39303: Server-Side Request Forgery (SSRF)

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vulnerability...

PT-2021-22512

Name of the Vulnerable Software and Affected Versions Jamf Pro versions prior to 10.32.0 Description The server in Jamf Pro has a vulnerability affecting integrity and availability. This issue allows for a Server-Side Request Forgery SSRF attack. Jamf Nation will also publish an article about thi...

JAMF Jamf Pro code issue vulnerability

JAMF Jamf Pro is an Apple device management solution from Jamf America JAMF. A security vulnerability exists in Jamf Pro versions prior to 10.32.0. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

CVE-2021-35037

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

CVE-2021-35037

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

Open redirect

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

CVE-2021-35037

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

CVE-2021-35037

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

CVE-2021-35037

The CVE refers to Jamf Pro before version 10.30.1 with an unvalidated/unauthorized URL redirect vulnerability in on‑premises deployments. The underlying issue is an unvalidated URL in Jamf Pro that can cause a user to be redirected to an arbitrary, potentially malicious URL when a crafted link is...

CVE-2021-35037: URL Redirection to Untrusted Site

Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may b...

PT-2021-20806

Name of the Vulnerable Software and Affected Versions: Jamf Pro versions prior to 10.30.1 Description: The issue allows for an unvalidated URL redirect, affecting Jamf Pro customers with on-premises environments. An attacker can craft a URL that appears legitimate but redirects users to an...

JAMF Jamf Pro input validation error vulnerability

JAMF Jamf Pro is an Apple device management solution from Jamf America JAMF. An input validation error vulnerability exists in versions of Jamf Pro prior to 10.30.1 that allows unauthenticated URL redirection to affect Jamf Pro customers in locally hosted environments...