Lucene search

[email protected]CVE-2012-4051

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-4051

2022-10-0316:15:33

CWE-352

[email protected]

web.nvd.nist.gov

cve-2012-4051

csrf

jamf software server

jamf casper suite

authentication hijacking

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.4%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before 8.61 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts or (2) change passwords via a Save action.

Affected configurations

NVD

Node

jamfcasper_suiteRange≤8.6

jamfcasper_suiteMatch7.0

jamfcasper_suiteMatch7.1

jamfcasper_suiteMatch7.2

jamfcasper_suiteMatch7.3

jamfcasper_suiteMatch8.0

jamfcasper_suiteMatch8.1

jamfcasper_suiteMatch8.2

jamfcasper_suiteMatch8.3

jamfcasper_suiteMatch8.4

jamfcasper_suiteMatch8.5

jamfcasper_suiteMatch8.43

jamfcasper_suiteMatch8.51

CPENameOperatorVersion
jamf:casper_suitejamf casper suitele8.6
jamf:casper_suitejamf casper suiteeq7.0
jamf:casper_suitejamf casper suiteeq7.1
jamf:casper_suitejamf casper suiteeq7.2
jamf:casper_suitejamf casper suiteeq7.3
jamf:casper_suitejamf casper suiteeq8.0
jamf:casper_suitejamf casper suiteeq8.1
jamf:casper_suitejamf casper suiteeq8.2
jamf:casper_suitejamf casper suiteeq8.3
jamf:casper_suitejamf casper suiteeq8.4

CPE	Name	Operator	Version
jamf:casper_suite	jamf casper suite	le	8.6
jamf:casper_suite	jamf casper suite	eq	7.0
jamf:casper_suite	jamf casper suite	eq	7.1
jamf:casper_suite	jamf casper suite	eq	7.2
jamf:casper_suite	jamf casper suite	eq	7.3
jamf:casper_suite	jamf casper suite	eq	8.0
jamf:casper_suite	jamf casper suite	eq	8.1
jamf:casper_suite	jamf casper suite	eq	8.2
jamf:casper_suite	jamf casper suite	eq	8.3
jamf:casper_suite	jamf casper suite	eq	8.4