JAMF Software Casper Suite Cross Site Request Forgery Vulnerability

Bugtraq ID:	55663
Class:	Input Validation Error
CVE:	CVE-2012-4051
Remote:	Yes
Local:	No
Published:	Sep 24 2012 12:00AM
Updated:	Sep 24 2012 12:00AM
Credit:	Jacob Holcomb
Vulnerable:	JAMF Software Casper Suite 0
Not Vulnerable:

JAMF Software Casper Suite Cross Site Request Forgery Vulnerability

The JAMF Software Casper Suite is prone to a cross-site request-forgery vulnerability because the application fails to properly validate HTTP requests.

Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application. Other attacks are also possible.

JAMF Software Casper Suite Cross Site Request Forgery Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

The following exploit code is available:

• /data/vulnerabilities/exploits/55663.html.txt

JAMF Software Casper Suite Cross Site Request Forgery Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

JAMF Software Casper Suite Cross Site Request Forgery Vulnerability

References:

• JAMF Software Casper Suite HomePage (JAMF Software)
  
• VU#555668 - JAMF Software Casper Suite contains a cross-site request forgery vul (US-CERT)