jenkins_scan

jenkinsscan Jenkins環境を発見し、CVE-2024-23897をチェックします 動作の仕組み Jenkinsの検出 パスをテスト: /、/login、/oops、/api/json、/cli、/jenkins/、/jenkins/api/json 以下の方法で識別: 1. X-Jenkins ヘッダー — 最も信頼性が高く、バージョンも返します 2. X-Hudson ヘッダー — より古いインスタンス 3. HTML本文 — "login to jenkins"、"hudson.model" などの文字列 4. /api/json —...

EUVD-2014-3614

Malware in sbrugna...

Jenkins allows for Code Execution via Crafted Packet to the CLI

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...

Arbitrary Code Execution

jenkins is vulnerable to arbitrary code execution. The vulnerability exists through the CLI channel...

jenkins: remote code execution flaw (SECURITY-150)

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...

Code injection

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...

CVE-2014-3666

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...

CVE-2014-3666

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...

CVE-2014-3666: Improper Control of Generation of Code

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel...