CVE-2021-39303

概要

参考情報

• blog.assetnote.io/2021/11/30/jamf-ssrf · Exploit
• community.jamf.com/t5/jamf-pro/what-s-new-in-jamf-pro-10-32-release/m-p/246505 · Vendor Advisory
• docs.jamf.com/10.32.0/jamf-pro/release-notes/Resolved_Issues.html · Release Notes
• jamf.com/resources/product-documentation/jamf-pro-release-notes · Release Notes

jamf のその他の脆弱性

• CVE-2023-31224緊急 9.8There is broken access control during authentication in Jamf Pro Server before 10.46.1.
• CVE-2021-40809高 8.8An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authenticat…
• CVE-2021-35037中 6.1Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-pre…
• CVE-2021-30125中 6.1Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376.
• CVE-2019-17076緊急 9.8An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cau…