{"id":"CVE-2024-4395","aliases":["EUVD-2024-44027","GHSA-68wq-r58h-5q45"],"status":"published","title":"Lack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation","description":"The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation.","severity":{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:N/R:U/V:D/RE:M/U:Green","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00211,"percentile":0.11456,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2024-06-27T21:28:35Z","modified":"2026-10-20T11:04:27Z","products":[{"vendor":"jamf","product":"jamf compliance editor"},{"vendor":"jamf","product":"jamf_compliance_editor"}],"references":[{"url":"https://khronokernel.com/macos/2024/05/01/CVE-2024-4395.html","tags":["technical-description","third-party-advisory","x_transferred","web"]},{"url":"https://github.com/Jamf-Concepts/jamf-compliance-editor/raw/v1.3.1/Jamf%20Compliance%20Editor%20-%20User%20Guide.pdf","tags":["vendor-advisory","release-notes","x_transferred","web"]},{"url":"https://trusted.jamf.com/docs/establishing-compliance-baselines#support","tags":["product","patch","x_transferred","web"]},{"url":"https://github.com/Jamf-Concepts/jamf-compliance-editor/releases/download/v1.3.1/JamfComplianceEditor.v1.3.1.pkg","tags":["patch","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4395"},{"url":"https://github.com/advisories/GHSA-68wq-r58h-5q45"}],"sources":{"cve":[{"id":"CVE-2024-4395","title":"Lack of Client Validation in Jamf Compliance Editor's Helper Service May Result in Privilege Escalation","description":"The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation.","status":"published","published":"2024-06-27T21:28:35.198Z","modified":"2024-08-01T20:40:47.14Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:N/R:U/V:D/RE:M/U:Green","level":"high","assessor":"cna"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:34:16.78507Z"}],"euvd":[{"id":"EUVD-2024-44027","description":"The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation.","status":"published","published":"2024-06-27T21:28:35Z","modified":"2024-08-01T20:40:47Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:N/R:U/V:D/RE:M/U:Green","level":"high"}],"updated_at":"2026-11-03T03:50:36.775345Z"}],"ghsa":[{"id":"GHSA-68wq-r58h-5q45","title":"The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on...","description":"The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation.","status":"published","published":"2024-06-28T00:33:31Z","modified":"2024-08-02T05:01:09Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:M/U:Green","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:57:49.83995Z"}],"nvd":[{"id":"CVE-2024-4395","description":"The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation.","status":"published","published":"2024-06-27T22:15:10.653Z","modified":"2026-06-17T08:01:48.7Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:M/U:Green","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:10:09.388795Z"}],"osv":[{"id":"CVE-2024-4395","description":"The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local privilege escalation.","status":"published","published":"2024-06-27T22:15:10.653Z","modified":"2026-10-20T11:04:27.523161278Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:M/U:Green","level":"high"}],"updated_at":"2026-11-02T15:44:42.322107Z"}]}}