Skip to main content
Solved

Certain character combinations in script causing 403 when saving


Forum|alt.badge.img+3
  • New Contributor

EDIT: This seems to be an issue effecting multiple JamfCloud hosted environments. I have Logged a support case with Jamf, as have other community members.
I will keep this thread up to date with any information from Jamf Support.

 

On two JAMFCloud Jamf Pro instances, running version 10.40.1-t1659581750

 

I am unable to save a particular script into Jamf, as every time I press Save it results in a 403 - Access Denied

403 error

Whilst debugging this I have found that there are certain character combinations that cause this error.

If I try to save a script with the following text only, I will get the 403 error

${a:}${}

 

glitch text 1

 

the "a" parameter / var can be swapped with any letter or number and it will still cause the error

If the curly braces are not touching the last $ it will save fine, if they are touching however it will error.

There can be text in between the first ${a:} and the second ${} and it will still crash.
The lines can even be commented out, and it will still crash

e.g. the below will still crash -

#

#${a:}

### asd

#${}

 

glitch text 2

This looks like some strange buffer overflow happening, or validation error crashing the console - rather than an actual access denied, as it is only happening with specific commands.

Does the same happen for anyone else, and is there a reason for this that can be avoided? Or is it a Bug

 

 

Best answer by shannon_pasto

FYI - Jamf have advised that they recently made a Web Application Firewall (WAF) change that's causing this. You'll need to contact Jamf support with all of your WAN/external IPs to get them whitelisted. If you're working from home and on DHCP with your ISP you'll need to contact Jamf each time it changes. 

I can appreciate that this is a security measure but it's a major annoyance as fas as I'm concerned. I've expressed my concern and asked for the issue to be escalated. In the meantime send Jamf your IPs or use Jamf Admin to upload new/edited scripts.

Cheers,

Shannon

View original
Did this topic help you find an answer to your question?

Forum|alt.badge.img+3

This is happening to me also, on at least 2 JAMFCloud.com instances - 

VERSION

10.40.1-t1659581750

It does not happen to me on a JAMF Pro On-Prem, 

VERSION

10.37.2-t1648851072

 

 


Forum|alt.badge.img+3
  • New Contributor
  • September 8, 2022
Shaunn_brown wrote:

This is happening to me also, on at least 2 JAMFCloud.com instances - 

VERSION

10.40.1-t1659581750

It does not happen to me on a JAMF Pro On-Prem, 

VERSION

10.37.2-t1648851072

 

 


Yes i have two instances running in Jamfcloud and both are showcasing this issue.
Looks to be an issue their end then


Forum|alt.badge.img+3
JSt wrote:

Yes i have two instances running in Jamfcloud and both are showcasing this issue.
Looks to be an issue their end then


Will you be opening a support ticket on it?


Forum|alt.badge.img+3
  • New Contributor
  • September 8, 2022
Shaunn_brown wrote:

Will you be opening a support ticket on it?


I certainly will now I know its not just me who is affected, thanks for the reply


Forum|alt.badge.img+2
  • New Contributor
  • September 8, 2022

I have this issue as well.  Noticed it yesterday (Sep-8-2022)


Forum|alt.badge.img+3
  • New Contributor
  • September 8, 2022
Brett_Cox wrote:

I have this issue as well.  Noticed it yesterday (Sep-8-2022)


interesting, I know my jamfcloud instance was updated this week so potentially related to this recent update.


Forum|alt.badge.img+13
  • Contributor
  • September 8, 2022

Same for our cloud instance. I opened a ticket.


Forum|alt.badge.img+8

FYI - Jamf have advised that they recently made a Web Application Firewall (WAF) change that's causing this. You'll need to contact Jamf support with all of your WAN/external IPs to get them whitelisted. If you're working from home and on DHCP with your ISP you'll need to contact Jamf each time it changes. 

I can appreciate that this is a security measure but it's a major annoyance as fas as I'm concerned. I've expressed my concern and asked for the issue to be escalated. In the meantime send Jamf your IPs or use Jamf Admin to upload new/edited scripts.

Cheers,

Shannon


Forum|alt.badge.img+3

wow, I am now glad I've got more On-Prem JAMF's than Cloud... still gonna be a pain in the .. .. .. neck.


Forum|alt.badge.img+3
Shaunn_brown wrote:

wow, I am now glad I've got more On-Prem JAMF's than Cloud... still gonna be a pain in the .. .. .. neck.


I gotta ask though, what did you mean use JAMF Admin to upload new and edited scripts. I've never seen that capability in it. Packages yes, scripts no.


Forum|alt.badge.img+3
  • New Contributor
  • September 9, 2022
Shaunn_brown wrote:

I gotta ask though, what did you mean use JAMF Admin to upload new and edited scripts. I've never seen that capability in it. Packages yes, scripts no.


You can actually just drag text files into the scripts area via JamfAdmin, and then rename them to .sh

This is the workaround we have been using so far, following the 403 issues on the web ui

the process is explained here: https://docs.jamf.com/10.24.1/jamf-pro/administrator-guide/Managing_Scripts.html


Forum|alt.badge.img+3
JSt wrote:

You can actually just drag text files into the scripts area via JamfAdmin, and then rename them to .sh

This is the workaround we have been using so far, following the 403 issues on the web ui

the process is explained here: https://docs.jamf.com/10.24.1/jamf-pro/administrator-guide/Managing_Scripts.html


Many thanks! Totally makes sense that it would work like that, I just hadn't dug into JAMF Admin that far yet. 


Forum|alt.badge.img+2
  • New Contributor
  • September 9, 2022

As of today (Sep. 09, 2022) the issue is no longer showing up.  I can create new and modify existing scripts without seeing the 403 error.  No changes were made by me or JAMF (That I know of) in regards to IP address listings.


Forum|alt.badge.img+3
  • New Contributor
  • September 9, 2022
Brett_Cox wrote:

As of today (Sep. 09, 2022) the issue is no longer showing up.  I can create new and modify existing scripts without seeing the 403 error.  No changes were made by me or JAMF (That I know of) in regards to IP address listings.


How strange, I am also now not seeing the issue!
Thanks for bringing to my attention!


Forum|alt.badge.img
  • New Contributor
  • September 12, 2022

I have this issue as well.  Noticed it yesterday


Forum|alt.badge.img+8

I have an update on this one. I escalated to my customer success manager and was given some further information after a bit more of investigation. There appears to have been a temporary WAF rule issue which was causing this on Jamf Cloud. It's now been resolved which is why it has gone for most people (including me).

There is also a know issue with saving scripts with illegal characters in them. It's specific sequence...

:-<letter>

 where "<letter>" is just any letter. That's a colon followed by a dash followed by any character. This will cause the 403 error so check your scripts.

Hope this helps everyone


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings