Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins — Jenkins Security Advisory 2024-08-07 Clear all filters
TI-2024-28734 CVE-2024-43045 · GHSA-8pv9-qh96-9hc6

Missing authorization in Jenkins

Priority LOW 33

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to access other users' "My Views".

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.02869 Published 2024-08-07 Partial fix · 2.452.4, 2.462.1 +1 CWE-862
TI-2024-28733 CVE-2024-43044 · GHSA-h856-ffvv-xvr4

Improper check for unusual conditions in Jenkins

Priority MEDIUM 61

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.28782 Published 2024-08-07 Partial fix · 2.452.4, 2.462.1 +4 CWE-754