CVE-2012-4051: Jamf Casper Suite

Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite before 8.61 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts or (2) change passwords via a Save action.

Affected products

• Jamf Casper Suite: up to and including 8.6; version 7.0 only; version 7.1 only; version 7.2 only; version 7.3 only; version 8.0 only; …

Published 2012-09-28. Last modified 2026-06-16.