What is CVE-2019-17076?

CVE-2019-17076 is a critical-severity vulnerability in Jamf, classified under Deserialization of Untrusted Data. CVSS score: 9.8/10. Published 2020-01-08.

How severe is CVE-2019-17076?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Deserialization in Jamf

CVE-2019-17076

An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Service (DoS), remote code execution (RCE), and/or deletion of files on the Jamf Pro server.

Vulnerability class: Insecure Deserialization

EPSS: 0.025 (83.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Jamf
N/a — versions n/a

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-17076?: CVE-2019-17076 is a critical-severity vulnerability in Jamf, classified under Deserialization of Untrusted Data. CVSS score: 9.8/10. Published 2020-01-08.
How severe is CVE-2019-17076?: Critical severity. CVSS v3 base score is 9.8 out of 10.