CVE-2020-15882

Name of the Vulnerable Software and Affected Versions MunkiReport versions prior to 5.6.3

Description A CSRF issue in the "manager/delete machine/{id}" endpoint allows attackers to delete arbitrary machines from the MunkiReport database.

Recommendations For versions prior to 5.6.3, update to version 5.6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "manager/delete machine/{id}" endpoint to minimize the risk of exploitation.