CVE-2024-43044

CVE-2024-43044 Description This script checks Jenkins instances for CVE-2024-43044 by retrieving the Jenkins version from the instance and comparing it against known vulnerable version ranges. CVE-2024-43044 : This vulnerability affects Jenkins core and remoting versions, allowing attackers to...

Exploit for Improper Check for Unusual or Exceptional Conditions in Jenkins

Intro This is an exploit for CVE-2024-43044, an arbitrary fil...

Exploit for Improper Check for Unusual or Exceptional Conditions in Jenkins

Intro This is an exploit for CVE-2024-43044, an arbitrary fil...

Critical: Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update

An update for OpenShift Jenkins is now available for Red Hat Product OCP Tools 4.14. Red Hat Product Security has rated this update as having a security impact of critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 : Red Hat Product OCP Tools 4.12 OpenShift Jenkins (RHSA-2024:5410)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5410 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Securi...

RHEL 8 : Red Hat Product OCP Tools 4.15 OpenShift Jenkins (RHSA-2024:5405)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5405 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Securi...

RHEL 8 : Red Hat Product OCP Tools 4.14 OpenShift Jenkins (RHSA-2024:5411)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5411 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Securi...

Exploit for Improper Check for Unusual or Exceptional Conditions in Jenkins

CVE-2024-43044 Description This script checks Jenkins inst...

CVE-2024-43044

A vulnerability was found in the Remoting library in Jenkins core, which handles communication between the Jenkins controller and agents. The ClassLoaderProxyfetchJar function may allow malicious agents or attackers with Agent/Connect permission to read arbitrary files from the Jenkins controller...

CVE-2024-43044

creationtimestamp| type| source ---|---|--- 2024-08-07 16:58:03+00:00| seen| https://t.me/cvedetector/2685 2024-08-09 15:10:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8222 2024-08-13 07:41:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8253 2024-08-29...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (>=0.15, <=0.16), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.16, <=0.18) +42 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.396)

org.jenkins-ci.main:jenkins-core MAVEN version 1.396 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins =0.15, =0.16, =0.12, =0.1, =1.0, =1.2 -...

com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (1.0.0), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (0.19) +14 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.404)

org.jenkins-ci.main:jenkins-core MAVEN version 1.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin 1.0.0 -...

org.jenkins-ci.main:jenkins-test-harness (1.406), org.jenkins-ci.main:jenkins-war (1.406) +7 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.406)

org.jenkins-ci.main:jenkins-core MAVEN version 1.406 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.406 - org.jenkins-ci.main:jenkins-war 1.406 -...

com.zenika.jenkins-ci.plugins:gradle (1.12), org.jenkins-ci.main:jenkins-test-harness (1.409) +70 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.409)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.zenika.jenkins-ci.plugins:gradle 1.12 - org.jenkins-ci.main:jenkins-test-harness 1.409 -...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (>=0.17, <=0.19), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.20, <=0.22) +9 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.411)

org.jenkins-ci.main:jenkins-core MAVEN version 1.411 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins =0.17, =0.20, =1.7, =1.17, =1.18 -...

com.thalesgroup.jenkins-ci.plugins:scons (0.4), net.praqma:matrix-reloaded (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.413)

org.jenkins-ci.main:jenkins-core MAVEN version 1.413 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:scons 0.4 - net.praqma:matrix-reloaded =1.0.0, =1.17, =0.5,...

com.thalesgroup.jenkins-ci.plugins:cppcheck (0.15), com.thalesgroup.jenkins-ci.plugins:xunit (1.16) +46 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.398)

org.jenkins-ci.main:jenkins-core MAVEN version 1.398 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck 0.15 - com.thalesgroup.jenkins-ci.plugins:xunit 1.1...

com.coravy.hudson.plugins.github:github (>=0.5, <=0.8), com.sonyericsson.hudson.plugins.gerrit:build-config (>=1.2.2, <=1.2.9) +34 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.400)

org.jenkins-ci.main:jenkins-core MAVEN version 1.400 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =0.5, =1.2.2, =1.2.2, =2.3.0, =1.4, =1.8, =1.10, =0.1.2...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.10, <=1.14), org.jenkins-ci.main:jenkins-test-harness (1.405) +8 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.405)

org.jenkins-ci.main:jenkins-core MAVEN version 1.405 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =1.10, =1.29, =0.92, =1.33, =1.43 Source cves:...

jenkins.plugins.htmlaudio:html-audio-notifier (0.1), org.jenkins-ci.main:jenkins-test-harness (1.431) +14 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.431)

org.jenkins-ci.main:jenkins-core MAVEN version 1.431 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jenkins.plugins.htmlaudio:html-audio-notifier 0.1 - org.jenkins-ci.main:jenkins-test-harness...