Jenkins
criticalCVSS 9.8
Arbitrary file read through the CLI command parser, leading to secret disclosure and often RCE.
Dampak
Reads configuration and secrets; chained into remote code execution.
Perbaikan
Upgrade to 2.442 or LTS 2.426.3 and disable CLI access over HTTP.
Referensi resmi
https://nvd.nist.gov/vuln/detail/CVE-2024-23897Apakah situs Boss terdampak?
VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2024-23897.
Jalankan audit gratis