CVE-2012-4051 - JAMF Casper Suite MDM CSRF Vulnerability # Exploit Title: JAMF Software's Casper Suite MDM Solution CSRF # Date: Discovered and reported July 2012 # Author: Jacob Holcomb/Gimppy042 # Software JAMF Software Casper Suite (http://jamfsoftware.com/products/casper-suite) # CVE : CVE-2012-4051 for the CSRF PwNd JAMF Casper Admin CSRF BY:Jacob Holcomb
If the HTML parameter/variable "user_id" is changed to a value of negative one (-1) this request to the web server will create a new user.