CVE-2024-4395

Lack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation

High · published June 27, 2024

CVSS v4.0
7.3
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:N/R:U/V:D/RE:M/U:Green
EPSS
0.00211 · 10.8th percentile
Published
2024-06-27T21:28Z
EPSS history
Timeline
  • 27 JUN 21:28Z
    Lack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation
    cvelistv5