CVE-2024-4395

Description

The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation.

Affected Platforms

Weakness Type

CWE-269

References

• https://github.com/Jamf-Concepts/jamf-compliance-editor/raw/v1.3.1/Jamf%20Compli…
• https://github.com/Jamf-Concepts/jamf-compliance-editor/releases/download/v1.3.1…
• https://khronokernel.com/macos/2024/05/01/CVE-2024-4395.html
• https://trusted.jamf.com/docs/establishing-compliance-baselines#support
• https://github.com/Jamf-Concepts/jamf-compliance-editor/raw/v1.3.1/Jamf%20Compli…
• https://github.com/Jamf-Concepts/jamf-compliance-editor/releases/download/v1.3.1…