Lucene search
Arun ShajiTRENDMICROBLOG:4F2E32FE729885C16B006D407AEFD2AEHistoryMar 19, 2024 - 12:00 a.m.
Jenkins Args4j CVE-2024-23897: Files Exposed, Code at Risk
2024-03-1900:00:00
Arun Shaji
www.trendmicro.com
23
jenkins
automation server
file exposure
code risk
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
Low
EPSS
0.96
Percentile
99.5%
Jenkins, a popular open-source automation server, was discovered to be affected by a file read vulnerability, CVE-2024-23897.
Related
githubexploit
githubexploit
Exploit for CVE-2024-23897
2024-02-16 23:21:40
Exploit for CVE-2024-23897
2024-05-03 08:18:51
Exploit for CVE-2024-23897
2024-02-21 18:32:45
github
github
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
2024-01-24 18:31:02
osv
osv
BIT-jenkins-2024-23897
2024-03-06 10:53:54
CGA-hh8q-gm3c-2w42
2024-06-06 12:26:02
CGA-7599-vh7r-jggh
2024-06-06 12:24:51
hivepro
hivepro
Critical Remote Code Execution Flaws Uncovered in Jenkins
2024-02-01 06:56:33
cvelist
cvelist
CVE-2024-23897
2024-01-24 17:52:22
zdt
zdt
Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read Exploit
2024-01-29 00:00:00
metasploit
metasploit
Jenkins cli Ampersand Replacement Arbitrary File Read
2024-01-30 22:12:10
cve
cve
CVE-2024-23897
2024-01-24 18:15:09
cgr
cgr
CVE-2024-23897 vulnerabilities
2024-05-19 03:07:16
packetstorm
packetstorm
Jenkins 2.441 Local File Inclusion
2024-04-15 00:00:00
Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read
2024-01-29 00:00:00
redhatcve
redhatcve
CVE-2024-23897
2024-01-25 20:21:50
alpinelinux
alpinelinux
CVE-2024-23897
2024-01-24 18:15:09
nvd
nvd
CVE-2024-23897
2024-01-24 18:15:09
prion
prion
Design/Logic Flaw
2024-01-24 18:15:00
veracode
veracode
Arbitrary File Read
2024-01-31 06:55:39
wolfi
wolfi
CVE-2024-23897 vulnerabilities
2024-07-26 21:09:29
exploitdb
exploitdb
Jenkins 2.441 - Local File Inclusion
2024-04-15 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 04/05/2024
2024-04-05 18:59:29
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (8b03d274-56ca-489e-821a-cf32f07643f0)
2024-01-25 00:00:00
Jenkins LTS < 2.426.3 / Jenkins weekly < 2.442 Multiple Vulnerabilities
2024-01-24 00:00:00
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2024:0776)
2024-04-28 00:00:00
kitploit
kitploit
CVE-2024-23897 - Jenkins <= 2.441 & <= LTS 2.426.2 PoC And Scanner
2024-02-25 11:30:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2024-01-24 00:00:00
thn
thn
Critical Jenkins Vulnerability Exposes Servers to RCE Attacks - Patch ASAP!
2024-01-25 11:57:00
redhat
redhat
(RHSA-2024:0776) Important: jenkins and jenkins-2-plugins security update
2024-02-12 10:18:15
(RHSA-2024:0775) Important: jenkins and jenkins-2-plugins security update
2024-02-12 10:17:47
(RHSA-2024:0778) Important: Jenkins and Jenkins-2-plugins security update
2024-02-12 10:30:15
redos
redos
ROS-20240411-08
2024-04-11 00:00:00
qualysblog
qualysblog
Oracle Critical Patch Update, July 2024 Security Update Review
2024-07-17 14:34:50
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
Low
EPSS
0.96
Percentile
99.5%
Related for TRENDMICROBLOG:4F2E32FE729885C16B006D407AEFD2AE