CVE-2019-9146

Published February 25th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.9

HIGH

Affected

PROJECT

Description

Jamf Self Service 10.9.0 allows man-in-the-middle attackers to obtain a root shell by leveraging the "publish Bash shell scripts" feature to insert "/Applications/Utilities/Terminal app/Contents/MacOS/Terminal" into the TCP data stream.

PAGalaxyLab/VulInfo

These are the vulnerabilities discovered by Galaxy Lab.

GitHub

151