CVE-2012-4051
JAMF Casper Suite MDM - Cross-Site Request Forgery
Severity Score
6.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before 8.61 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts or (2) change passwords via a Save action.
Múltiples vulnerabilidades de falsificación de petición en sitios cruzados (CSRF) en editAccount.html en el JAMF Software Server (JSS) interface en JAMF Casper Suite before v8.61 permite a atacantes remotos evitar la autenticación de los administradores para peticiones (1) creación cuenta usuario o (2) cambio de contraseña a través de la acción "Save".
JAMF Casper Suite MDM suffers from a cross site request forgery vulnerability.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-07-25 CVE Reserved
- 2012-09-27 First Exploit
- 2012-09-28 CVE Published
- 2024-09-17 CVE Updated
- 2024-10-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.kb.cert.org/vuls/id/555668 | Third Party Advisory |
|
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/21545 | 2012-09-27 | |
| http://infosec42.blogspot.com/2012/09/jamf-casper-suite-mdm-csrf-vulnerability.html | 2024-09-17 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://jamfsoftware.com/libraries/pdf/products/documentation/Casper_Suite_8.61_Release_Notes.pdf | 2012-09-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | <= 8.6 Search vendor "Jamf" for product "Casper Suite" and version " <= 8.6" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 7.0 Search vendor "Jamf" for product "Casper Suite" and version "7.0" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 7.1 Search vendor "Jamf" for product "Casper Suite" and version "7.1" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 7.2 Search vendor "Jamf" for product "Casper Suite" and version "7.2" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 7.3 Search vendor "Jamf" for product "Casper Suite" and version "7.3" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 8.0 Search vendor "Jamf" for product "Casper Suite" and version "8.0" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 8.1 Search vendor "Jamf" for product "Casper Suite" and version "8.1" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 8.2 Search vendor "Jamf" for product "Casper Suite" and version "8.2" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 8.3 Search vendor "Jamf" for product "Casper Suite" and version "8.3" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 8.4 Search vendor "Jamf" for product "Casper Suite" and version "8.4" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 8.5 Search vendor "Jamf" for product "Casper Suite" and version "8.5" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 8.43 Search vendor "Jamf" for product "Casper Suite" and version "8.43" | - |
Affected
| ||||||
| Jamf Search vendor "Jamf" | Casper Suite Search vendor "Jamf" for product "Casper Suite" | 8.51 Search vendor "Jamf" for product "Casper Suite" and version "8.51" | - |
Affected
| ||||||