CVE-2024-4395 HIGH

CVE-2024-4395: Lack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation

Vendor Jamf
Product Jamf Compliance Editor
Published June 27, 2024
Last update August 1, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:N/R:U/V:D/RE:M/U:Green

What the vulnerability does

01Description

The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation.

Key dates

02Disclosure timeline

June 27, 2024 CVE published
August 1, 2024 Record updated