TI-2024-32072 Aliases CVE-2024-47804 GHSA-f9qj-77q2-h5c5

Type confusion in Jenkins

LOW 21CWE-843Published 2024-10-02 · Updated 2025-03-14

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: None · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-863.

Summary

If an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API and either of these checks fail, Jenkins 2.478 and earlier, LTS 2.462.2 and earlier creates the item in memory, only deleting it from disk, allowing attackers with Item/Configure permission to save the item to persist it, effectively bypassing the item creation restriction.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00669 52nd percentileScored 2026-11-07

Fix Fixed Jenkins (Jenkins Project): 2.462.3, 2.479org.jenkins-ci.main:jenkins-core (Maven): 2.462.3, 2.479Red Hat: 4 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Jenkins	Jenkins	—	2.462.3, 2.479	Patch available	CNA
—	org.jenkins-ci.main:jenkins-core (Maven)	before 2.462.3	2.462.3	Patch available	GHSA-f9qj-77q2-h5c5
—	org.jenkins-ci.main:jenkins-core (Maven)	2.466 to before 2.479	2.479	Patch available	GHSA-f9qj-77q2-h5c5

Jenkins VendorJenkins Affected — Fixed in 2.462.3, 2.479 Patch available CNA
org.jenkins-ci.main:jenkins-core (Maven) Vendor— Affected before 2.462.3 Fixed in 2.462.3 Patch available GHSA-f9qj-77q2-h5c5
org.jenkins-ci.main:jenkins-core (Maven) Vendor— Affected 2.466 to before 2.479 Fixed in 2.479 Patch available GHSA-f9qj-77q2-h5c5

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:jenkins:jenkins:::::lts:::*	before 2.462.3	Vulnerable	Jenkins
cpe:2.3:a:jenkins:jenkins:::::-:::*	before 2.479	Vulnerable	Jenkins

cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:* Versions before 2.462.3 Vulnerable ·Jenkins
cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:* Versions before 2.479 Vulnerable ·Jenkins

Remediation

Fix · CNA Jenkins (Jenkins Project) Fixed in 2.462.3, 2.479
Fix · GHSA-f9qj-77q2-h5c5 org.jenkins-ci.main:jenkins-core (Maven) Fixed in 2.462.3 Advisory →
Fix · GHSA-f9qj-77q2-h5c5 org.jenkins-ci.main:jenkins-core (Maven) Fixed in 2.479 Advisory →

Red Hat 4 advisories

RHSA-2024:8887 Released 2024-11-05 · Red Hat rating Important
Red Hat Product OCP Tools 4.13 Openshift Jenkins security update
- OpenShift Developer Tools and Services for OCP 4.13 jenkins-2-plugins-4.13.1729840148-1.el8, jenkins-2.462.3.1729839924-3.el8
RHSA-2024:8886 Released 2024-11-05 · Red Hat rating Important
Red Hat Product OCP Tools 4.12 Openshift Jenkins security update
- OpenShift Developer Tools and Services for OCP 4.12 jenkins-2-plugins-4.12.1730119231-1.el8, jenkins-2.462.3.1730119132-3.el8
RHSA-2024:8885 Released 2024-11-05 · Red Hat rating Important
Red Hat Product OCP Tools 4.14 Openshift Jenkins security update
- OpenShift Developer Tools and Services for OCP 4.14 jenkins-2-plugins-4.14.1729839844-1.el8, jenkins-2.462.3.1729839727-3.el8

Show 1 more Red Hat advisories

RHSA-2024:8884 Released 2024-11-05 · Red Hat rating Important
Red Hat Product OCP Tools 4.15 Openshift Jenkins security update
- OpenShift Developer Tools and Services for OCP 4.15 jenkins-2-plugins-4.15.1729838165-1.el8, jenkins-2.462.3.1729837947-3.el8

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Advisory · 2024-10-02
Jenkins — Jenkins Security Advisory 2024-10-02
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2024-32071 Information disclosure through error messages in JenkinsPriority LOW 22
Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
OpenShift Developer Tools and Services for OCP 4.12	Fixed	RHSA-2024:8886
OpenShift Developer Tools and Services for OCP 4.13	Fixed	RHSA-2024:8887
OpenShift Developer Tools and Services for OCP 4.14	Fixed	RHSA-2024:8885
OpenShift Developer Tools and Services for OCP 4.15	Fixed	RHSA-2024:8884

Not affected: 1 product

Red Hat Developer Hub 1

Timeline

2026-10-02 Threatist record created from CVE-2024-47804
2026-10-03 Alias added: GHSA-f9qj-77q2-h5c5
2026-10-27 Affected versions changed · Red Hat

References

Advisory 2

TI-2024-15885 Path traversal in Jenkins KEVCVSS 3.1CRITICAL 9.8
TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
TI-2017-14573 Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an… KEVCVSS 3.1CRITICAL 9.8
TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
TI-2015-04472 The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote… KEVCVSS 3.1HIGH 7.5
TI-2016-07596 The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers… CVSS 3.0CRITICAL 9.8

See all 293 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences