Today > | 3 Medium | 2 Low vulnerabilities - You can now download lists of IOCs here!

CVE-2024-43044

Aug. 7, 2024, 3:17 p.m.

Product(s) Impacted

Jenkins

2.470 and earlier
LTS 2.452.3 and earlier

Description

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library.

Weaknesses

Date

Published: Aug. 7, 2024, 2:15 p.m.

Last Modified: Aug. 7, 2024, 3:17 p.m.

Status : Undergoing Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

jenkinsci-cert@googlegroups.com

References

https://www.jenkins.io/ jenkinsci-cert@googlegroups.com