Lucene search
CISACISA-KEV-CVE-2024-23897HistoryAug 19, 2024 - 12:00 a.m.
Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
2024-08-1900:00:00
CISA
www.cisa.gov
8
jenkins
command line
path traversal
vulnerability
limited read access
code execution
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
Low
EPSS
0.97
Percentile
99.8%
Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.
Related
osv
osv
BIT-jenkins-2024-23897
2024-03-06 10:53:54
CVE-2024-23897
2024-01-24 18:15:09
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
2024-01-24 18:31:02
githubexploit
githubexploit
Exploit for Path Traversal in Jenkins
2024-02-21 18:32:45
Exploit for CVE-2024-23897
2024-02-16 23:21:40
Exploit for Path Traversal in Jenkins
2024-05-03 08:18:51
github
github
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
2024-01-24 18:31:02
hivepro
hivepro
Critical Remote Code Execution Flaws Uncovered in Jenkins
2024-02-01 06:56:33
cvelist
cvelist
CVE-2024-23897
2024-01-24 17:52:22
packetstorm
packetstorm
Jenkins cli Ampersand Replacement Arbitrary File Read
2024-08-31 00:00:00
Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read
2024-01-29 00:00:00
Jenkins 2.441 Local File Inclusion
2024-04-15 00:00:00
metasploit
metasploit
Jenkins cli Ampersand Replacement Arbitrary File Read
2024-01-30 22:12:10
exploitdb
exploitdb
Jenkins 2.441 - Local File Inclusion
2024-04-15 00:00:00
zdt
zdt
Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read Exploit
2024-01-29 00:00:00
vulnrichment
vulnrichment
CVE-2024-23897
2024-01-24 17:52:22
attackerkb
attackerkb
CVE-2024-23897
2024-01-24 00:00:00
alpinelinux
alpinelinux
CVE-2024-23897
2024-01-24 18:15:09
prion
prion
Design/Logic Flaw
2024-01-24 18:15:00
trendmicroblog
trendmicroblog
Jenkins Args4j CVE-2024-23897: Files Exposed, Code at Risk
2024-03-19 00:00:00
nvd
nvd
CVE-2024-23897
2024-01-24 18:15:09
veracode
veracode
Arbitrary File Read
2024-01-31 06:55:39
wolfi
wolfi
CVE-2024-23897 vulnerabilities
2024-09-16 09:11:42
redhatcve
redhatcve
CVE-2024-23897
2024-01-25 20:21:50
cgr
cgr
CVE-2024-23897 vulnerabilities
2024-05-19 03:07:16
thn
thn
CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks
2024-08-20 04:53:00
Critical Jenkins Vulnerability Exposes Servers to RCE Attacks - Patch ASAP!
2024-01-25 11:57:00
cve
cve
CVE-2024-23897
2024-01-24 18:15:09
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 04/05/2024
2024-04-05 18:59:29
nessus
nessus
Jenkins LTS < 2.426.3 / Jenkins weekly < 2.442 Multiple Vulnerabilities
2024-01-24 00:00:00
FreeBSD : jenkins -- multiple vulnerabilities (8b03d274-56ca-489e-821a-cf32f07643f0)
2024-01-25 00:00:00
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2024:0776)
2024-04-28 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2024-01-24 00:00:00
kitploit
kitploit
CVE-2024-23897 - Jenkins <= 2.441 & <= LTS 2.426.2 PoC And Scanner
2024-02-25 11:30:00
redhat
redhat
(RHSA-2024:0776) Important: jenkins and jenkins-2-plugins security update
2024-02-12 10:18:15
(RHSA-2024:0775) Important: jenkins and jenkins-2-plugins security update
2024-02-12 10:17:47
(RHSA-2024:0778) Important: Jenkins and Jenkins-2-plugins security update
2024-02-12 10:30:15
redos
redos
ROS-20240411-08
2024-04-11 00:00:00
qualysblog
qualysblog
2024 Midyear Threat Landscape Review
2024-08-06 13:00:00
Oracle Critical Patch Update, July 2024 Security Update Review
2024-07-17 14:34:50
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
Low
EPSS
0.97
Percentile
99.8%
Related for CISA-KEV-CVE-2024-23897