CVE-2021-39303

Critical

Description

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an article about this vulnerability.

SeverityCritical
CVSS9.8
Exploit probability—
ProductJamf
PublishedNov 12, 2021
First seenNov 12, 2021

How to fix

Update
  • jamf jamf10.32.0 or later

Affected products

ProductAffected versionsFixed in
jamf jamfv < 10.32.010.32.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.