CVE-2012-4051

Published: Sep 28, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before 8.61 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts or (2) change passwords via a Save action.

Affected (13)

Products: Jamf: Casper Suite

Jamf

1 product

Casper Suite

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Jamf Casper Suite	Up to 8.6
Jamf Casper Suite	Version 7.0
Jamf Casper Suite	Version 7.1
Jamf Casper Suite	Version 7.2
Jamf Casper Suite	Version 7.3
Jamf Casper Suite	Version 8.0
Jamf Casper Suite	Version 8.1
Jamf Casper Suite	Version 8.2
Jamf Casper Suite	Version 8.3
Jamf Casper Suite	Version 8.43
Jamf Casper Suite	Version 8.4
Jamf Casper Suite	Version 8.51
Jamf Casper Suite	Version 8.5