Jamf bungles server security fix with in-the-dark update for servers

guest · Oct 1, 2019

Jamf bungles server security fix with in-the-dark update for servers
Mac admins steaming over handling of 'critical' patch rollout
October 1, 2019
https://www.theregister.co.uk/2019/10/01/jamf_server_security_fix/

MacOS network admins are being advised to update their copies of the Jamf Pro management software following the disclosure of a critical security flaw.

This is a patch that will mostly just concern admins who use Jamf Pro to manage their devices.
That said, if a company's Jamf Pro server is compromised, it's pretty much game over for any of that server's managed devices as well.

"This vulnerability does not pose a risk to private data or managed devices. It does have the potential to impact the integrity and availability of your web server," Jamf product marketing manager Garrett Denney told customers.
While most devices were not vulnerable, Jamf's handling of the patch release and its support for customers leaves a lot to be desired. Initially, Jamf only released a support post [...]

Naturally, and rightly so, this drew protests from admins who explained that they needed details such as CVE numbers and CVSS scores in order to properly assess the flaw and plan the patching.
It was only after angry customers reposted the emails that the details on the vulnerability were made public.
Click to expand...

Log in or Sign up

Jamf bungles server security fix with in-the-dark update for servers

guest Guest

Log in or Sign up

Jamf bungles server security fix with in-the-dark update for servers

guest Guest

Useful Searches