medium6.8Public exploit code
CVE-2012-4051
Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before 8.61 all…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- JAMF Casper Suite MDM - Cross-Site Request Forgery2012-09-27 · webapps · jsp
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before 8.61 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts or (2) change passwords via a Save action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jamf | Casper Suite | through 8.6 Versions 7.0, 7.1, 7.2, 7.3, 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://infosec42.blogspot.com/2012/09/jamf-casper-suite-mdm-csrf-vulnerability.html
- http://jamfsoftware.com/libraries/pdf/products/documentation/Casper_Suite_8.61_Release_Notes.pdf
- http://www.kb.cert.org/vuls/id/555668
- http://infosec42.blogspot.com/2012/09/jamf-casper-suite-mdm-csrf-vulnerability.html
- http://jamfsoftware.com/libraries/pdf/products/documentation/Casper_Suite_8.61_Release_Notes.pdf
- http://www.kb.cert.org/vuls/id/555668