CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability

Jenkins ist ein Open-Source-Automatisierungsserver. Er hilft dabei, die Teile der Softwareentwicklung zu automatisieren, die mit dem Erstellen, Testen und Bereitstellen zusammenhängen, und erleichtert kontinuierliche Integration und kontinuierliche Bereitstellung. CVE-2024-23897Schwachstelle zum...

CVE-2024-23897

CVE-2024-23897 Jenkins 2.441 e anteriores, LTS 2.426.2 e anteriores, não desativa um recurso do analisador de comandos de sua CLI que substitui um caractere '@' seguido por um caminho de arquivo em um argumento pelo conteúdo do arquivo, permitindo que atacantes não autenticados leiam arquivos...

CVE-2024-23897

CVE-2024-23897 A causa di una configurazione errata di un'opzione predefinita nel parser dei comandi CLI, un attaccante può leggere file arbitrari Riepilogo della CVE Jenkins 2.441 e versioni precedenti, LTS 2.426.2 e versioni precedenti non disabilitano una funzionalità del proprio parser dei...

PoC-Fix-jenkins-rce_CVE-2024-23897

PoC-jenkins-rceCVE-2024-23897. In questa git puoi trovare tutte le informazioni sulla CVE-2024-23897. Introduzione Il problema, assegnato all'identificativo CVE CVE-2024-23897, è stato descritto come una vulnerabilità di lettura arbitraria di file attraverso l'interfaccia a riga di comando...

EUVD-2018-1304

Malware in sbrugna...

EUVD-2018-0999

Malware in sbrugna...

EUVD-2018-1008

Malware in sbrugna...

EUVD-2020-24748

Malware in sbrugna...

EUVD-2018-1300

Malware in sbrugna...

EUVD-2015-4260

Malware in sbrugna...

EUVD-2018-7246

Malware in sbrugna...

EUVD-2018-1007

Malware in sbrugna...

EUVD-2018-1017

Malware in sbrugna...

EUVD-2017-3912

Malware in sbrugna...

EUVD-2021-6595

Malicious code in bioql PyPI...

BIT-JENKINS-2024-23897

Jenkins LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system...

CVE-2024-23897

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system...

Cisco NX-OS Software CLI Arbitrary Command Execution (CVE-2018-0306)

A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by...

Cisco FXOS Software and UCS Fabric Interconnect Arbitrary Code Execution (CVE-2018-0302)

A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to incorrect input validation in the CLI parser subsystem. An attacker could...

CVE-2022-20828

A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance ASA FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the root user. This vulnerabilit...