CVE-2023-27904

A flaw was found in Jenkins. The affected version of Jenkins prints an error stack trace on agent-related pages when agent connections are broken. This stack trace may contain information about Jenkins configuration that is otherwise inaccessible to attackers...

CVE-2023-27904

creationtimestamp| type| source ---|---|--- 2023-03-11 00:27:42+00:00| seen| https://t.me/cibsecurity/59863 2025-02-28 19:27:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5959 2025-03-02 11:45:39+00:00| seen| Telegram/iPVcxoH8sPQP9s9fBQ1EzxFHRPe9jRAtxelt9HtGNiwZMtBN...

CVE-2023-27904 vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2023-27904

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers...

CVE-2023-27904 vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2023-27904

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers...

Jenkins < 2.375.4 (LTS), < 2.394 Multiple Vulnerabilities - Windows

Jenkins is prone to multiple vulnerabilities. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2023-27904

CVE-2023-27904 is active in Jenkins/Jenkins-2-plugins deployments per multiple security advisories (RHSA) and Nessus findings. The issue is information disclosure: when agent connections fail, error stack traces may reveal Jenkins configuration details to an attacker. Affected environments includ...

CVE-2023-27904

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers...

jenkins -- multiple vulnerabilities

Jenkins Security Advisory: Description High SECURITY-3037 / CVE-2023-27898 XSS vulnerability in plugin manager Medium SECURITY-3030 / CVE-2023-24998 upstream issue, CVE-2023-27900 MultipartFormDataParser, CVE-2023-27901 StaplerRequest DoS vulnerability in bundled Apache Commons FileUpload library...

CVE-2022-27904

Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use TOCTOU race-condition attack during the agent install process...

CVE-2022-27904

Automox Agent for macOS is affected by CVE-2022-27904 due to a time-of-check/time-of-use (TOCTOU) race condition during installation. The issue also involves improper access control on a file used by the PostInstall script, enabling an unprivileged user to obtain root access. Affected versions ar...

CVE-2020-27904

creationtimestamp| type| source ---|---|--- 2021-05-08 13:05:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3318...

Exploit for CVE-2020-27904

xattr-oob-swap CVE-2020-27904: a tfp0 bug for macOS 10.15.x a...

CVE-2021-27904

creationtimestamp| type| source ---|---|--- 2021-03-02 12:44:10+00:00| seen| https://t.me/cibsecurity/24332...

CVE-2021-27904

An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the "all org" flag sometimes provided view access to unintended actors...

CVE-2021-27904

The CVE-2021-27904 issue affects MISP 2.4.139, specifically in app/Model/SharingGroupServer.php within the Sharing Groups implementation. The root cause is that the implementation of the "all org" flag can grant view access to unintended actors, exposing sensitive information to unauthorized part...

macOS 10.14.x < 10.14.6 Security Update 2021-001 / 10.15.x < 10.15.7 Security Update 2021-001 / macOS 11.x < 11.2 (HT212147)

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-001 Mojave, 10.15.x prior to 10.15.7 Security Update 2021-001 Catalina, or 11.x prior to 11.2. It is, therefore, affected by multiple vulnerabilities, including the following: - A logic...

CVE-2020-27904

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-27904

Summary of CVE-2020-27904 : Apple macOS Big Sur 11.0.1 fixes a kernel-level memory corruption issue described as a logic issue that could allow an application to execute arbitrary code with kernel privileges. The root cause is disclosed as memory corruption in kernel components and was addressed ...