Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.
Product
Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.
Vulnerabilities 11
-
Critical 9.8
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files …
KEV Aug 19, 2024 -
High 8.8
Cross-site WebSocket hijacking vulnerability in the Jenkins CLI
Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing at…
-
High 7.5
Arbitrary file read vulnerability in Jenkins Log Command Plugin
Jenkins Log Command Plugin 1.0.2 and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read content from arbitrary fil…
-
Medium 6.5
Arbitrary file read vulnerability in Git server Plugin can lead to RCE
Jenkins Git server Plugin 99.va_0826a_b_cdfa_d and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing attackers with Overall/Read permission to read…
-
Medium 6.5
Shared projects are unconditionally discovered by Jenkins GitLab Branch Source Plugin
Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jenkins…
-
Medium 5.7
Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with …
-
Medium 5.7
Possible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliance
Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with …
-
Medium 5.4
Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin
Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
-
Medium 5.3
Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin
Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a val…
-
Medium 4.3
Path traversal vulnerability in Jenkins Matrix Project Plugin
Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allowing attackers with Item/Configure permission to create or replace any config.xml files on the Jenkins controller file …
-
Medium 4.3
CSRF vulnerability in Jenkins GitLab Branch Source Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL.
Revision history
-
#6
CVE-2024-23897 wird ausgenutzt
-
#5
Neue Updates von Red Hat aufgenommen
-
#4
Neue Updates von Red Hat aufgenommen
-
#3
Neue Updates von Red Hat aufgenommen
-
#2
PoC für CVE-2024-23897 aufgenommen
-
#1
Initiale Fassung
References
-
Jenkins Security Advisory vom 2024-01-24
https://www.jenkins.io/security/advisory/2024-01-24/
-
PoC CVE-2024-23897 vom 2024-01-25
https://github.com/binganao/CVE-2024-23897/tree/main
-
Red Hat Security Advisory RHSA-2024:0775 vom 2024-02-12
https://access.redhat.com/errata/RHSA-2024:0775
-
Red Hat Security Advisory RHSA-2024:0778 vom 2024-02-12
https://access.redhat.com/errata/RHSA-2024:0778
-
Red Hat Security Advisory RHSA-2024:0776 vom 2024-02-12
https://access.redhat.com/errata/RHSA-2024:0776
-
Red Hat Security Advisory RHSA-2024:3636 vom 2024-06-05
https://access.redhat.com/errata/RHSA-2024:3636
-
Red Hat Security Advisory RHSA-2024:3634 vom 2024-06-05
https://access.redhat.com/errata/RHSA-2024:3634
-
Red Hat Security Advisory RHSA-2024:3635 vom 2024-06-05
https://access.redhat.com/errata/RHSA-2024:3635
-
Red Hat Security Advisory RHSA-2024:4597 vom 2024-07-19
https://access.redhat.com/errata/RHSA-2024:4597
-
Fortiguard Outbreak Alert vom 2024-08-20
https://fortiguard.fortinet.com/outbreak-alert/jenkins-rce