Kitzy kitzy

kitzy / jamfProVersioner.sh

Created April 2, 2018 22:10

Expands the Jamf Pro ROOT.war, extracts the version number, and renames the ROOT.war file to include the version number.

	#!/bin/bash

	if [ -z $1 ]
	then
	echo "ROOT.war must be passed as the first arguement to this script!"
	exit 1
	fi

	warFile=$1

kitzy / gist:e9680ec0df56426c915c9f393f3e6d4b

Created November 28, 2018 00:52

keybase.md

	### Keybase proof

	I hereby claim:

	* I am kitzy on github.
	* I am kitzy (https://keybase.io/kitzy) on keybase.
	* I have a public key whose fingerprint is F6DD 1BCC 34EA 2640 5138 4289 C3BD 2E94 C4B3 2F62

	To claim this, I am signing this object:

kitzy / jamfPro10.15.1.txt

Created September 30, 2019 18:16

Details regarding the vulnerability patched in Jamf Pro 10.15.1 and 10.13.1

	In order to help customers understand the severity of security vulnerabilities, Jamf uses the Common Vulnerability Scoring System (CVSS). For more information about CVSS, see https://www.first.org/cvss/.

	The CVSS v3.1 score for PI-007507 in version 9.81 is 10.0 (Critical): https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

	Jamf Pro Version 10.14 through 10.15

	A request containing specially crafted package could be sent to certain endpoints in Jamf Pro resulting in the deletion of files on the server.

	Jamf Pro Version 9.4 through 10.13