In response to the Sudo Vulnerability: Sudo-escalating on macOS (Jamf Blog)
I put together an EA script that simply reports the Sudo Version on Macs:
Data Type: String
Input Type Script:
#!/bin/bash
#Shaquir Tannis 2-10-21
#Reports Sudo Version
echo "<result>$(sudo -V | head -n1 | awk '{print $3}')</result>"
From here you can create a Smart Group the checks if the Macs are not on the current patched version: 1.9.5p2
Some further discussion about the Supplemental Updates that patch this Vulnerability: Apple has released another update
