Jamf Pro

CPE: cpe:2.3:a:jamf:jamf::::::::

Patched Version:	10.34.1
Last Vulnerable Version:	10.34.0
First Vulnerable Version:	10.31.0

Vendor Data

Confirmed Vulnerable

Vendor Patch Exists

Community Data

Log4j Default

Vulnerable

Exploitable

Vendor Resources

Resource	Link
Mitigating the Apache Log4j 2 Vulnerability	https://docs.jamf.com/technical-articles/Mitigating_the_Apache_Log4j_2_Vulnerability.html

Community Resources

Resource	Link
Mitigating the Apache Log4j 2 Vulnerability	https://docs.jamf.com/technical-articles/Mitigating_the_Apache_Log4j_2_Vulnerability.html
Randori Advisory	https://www.randori.com/blog/jamf-pro-log4shell-impact-remediations/

Community Notes

Source	Note
NCSC-NL	CVE-2021-4104: Not vuln ; CVE-2021-44228: Fix

Sources

Date	Attribution	Description
2022-01-03 12:30:19	NCSC-NL	Updated vendorPatchExists. Updated community note. Updated community link Mitigating the Apache Log4j 2 Vulnerability.
2021-12-30 21:31:50	CISAGov	Updated communityVulnerable. Updated vendorPatchExists. Updated vendor link Mitigating the Apache Log4j 2 Vulnerability.
2021-12-13T14:07:00-07:00	Randori	Updated cpe. Updated patchedVersion. Updated firstVulnerable. Updated lastVulnerable. Updated vendorConfirmedVulnerable. Updated vendorPatchExists. Updated communityLog4jDefault. Updated communityVulnerable. Updated communityExploitable. Updated community link Randori Advisory.