CVE-2024-23897

Produto

Jenkins / Jenkins Command Line Interface (CLI)

Vulnerabilidade

Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

Adicionado ao KEV

19 de ago. de 2024

Corrigir até

9 de set. de 2024

Uso conhecido em ransomware

Sim

Descrição resumida

Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314; https://nvd.nist.gov/vuln/detail/CVE-2024-23897