Summary
Detail | |||
---|---|---|---|
Vendor | Jenkins | First view | 2011-12-01 |
Product | Jenkins | Last view | 2023-03-10 |
Version | 1.154 | Type | Application |
Update | * | ||
Edition | * | ||
Language | * | ||
Sofware Edition | - | ||
Target Software | * | ||
Target Hardware | * | ||
Other | * | ||
CPE Product | cpe:2.3:a:jenkins:jenkins |
Activity : Overall
Related : CVE
Date | Alert | Description | |
---|---|---|---|
5.3 | 2023-03-10 | CVE-2023-27904 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers. |
4.4 | 2023-03-10 | CVE-2023-27903 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used. |
4.3 | 2023-03-10 | CVE-2023-27902 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows attackers with Item/Workspace permission to access their contents. |
7.5 | 2023-03-10 | CVE-2023-27901 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in org.kohsuke.stapler.RequestImpl, allowing attackers to trigger a denial of service. |
7.5 | 2023-03-10 | CVE-2023-27900 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service. |
7 | 2023-03-10 | CVE-2023-27899 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a plugin for installation, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used, potentially resulting in arbitrary code execution. |
9.6 | 2023-03-10 | CVE-2023-27898 | Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins version a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide plugins to the configured update sites and have this message shown by Jenkins instances. |
7.5 | 2022-10-19 | CVE-2022-43429 | Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system. |
5.3 | 2022-10-19 | CVE-2022-43428 | Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. |
5.3 | 2022-10-19 | CVE-2022-43424 | Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. |
5.3 | 2022-10-19 | CVE-2022-43423 | Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. |
5.3 | 2022-10-19 | CVE-2022-43422 | Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process. |
8.8 | 2022-10-19 | CVE-2022-43416 | Jenkins Katalon Plugin 1.0.32 and earlier implements an agent/controller message that does not limit where it can be executed and allows invoking Katalon with configurable arguments, allowing attackers able to control agent processes to invoke Katalon on the Jenkins controller with attacker-controlled version, install location, and arguments, and attackers additionally able to create files on the Jenkins controller (e.g., attackers with Item/Configure permission could archive artifacts) to invoke arbitrary OS commands. |
5.4 | 2022-09-21 | CVE-2022-41224 | Jenkins 2.367 through 2.369 (both inclusive) does not escape tooltips of the l:helpIcon UI component used for some help icons on the Jenkins web UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control tooltips for this component. |
8.2 | 2022-07-27 | CVE-2022-36900 | Jenkins Compuware zAdviser API Plugin 1.0.3 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties. |
8.2 | 2022-07-27 | CVE-2022-36899 | Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties. |
7.5 | 2022-07-07 | CVE-2022-2048 | In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests. |
7.5 | 2022-06-23 | CVE-2022-34175 | Jenkins 2.335 through 2.355 (both inclusive) allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive information, bypassing any permission checks in the corresponding view. |
7.5 | 2022-06-23 | CVE-2022-34174 | In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username and wrong password, when using the Jenkins user database security realm. |
6.1 | 2022-06-23 | CVE-2022-34173 | In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without escaping the job display name, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission. |
6.1 | 2022-06-23 | CVE-2022-34172 | In Jenkins 2.340 through 2.355 (both inclusive) symbol-based icons unescape previously escaped values of 'tooltip' parameters, resulting in a cross-site scripting (XSS) vulnerability. |
6.1 | 2022-06-23 | CVE-2022-34171 | In Jenkins 2.321 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the HTML output generated for new symbol-based SVG icons includes the 'title' attribute of 'l:ionicon' (until Jenkins 2.334) and 'alt' attribute of 'l:icon' (since Jenkins 2.335) without further escaping, resulting in a cross-site scripting (XSS) vulnerability. |
6.1 | 2022-06-23 | CVE-2022-34170 | In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does not escape the feature name that is part of its tooltip, effectively undoing the fix for SECURITY-1955, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission. |
6.5 | 2022-03-15 | CVE-2022-27201 | Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery. |
7.5 | 2022-02-09 | CVE-2022-0538 | Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage. |
CWE : Common Weakness Enumeration
% | id | Name |
---|---|---|
27% (50) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
14% (27) | CWE-200 | Information Exposure |
7% (13) | CWE-264 | Permissions, Privileges, and Access Controls |
6% (12) | CWE-352 | Cross-Site Request Forgery (CSRF) |
6% (12) | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path ... |
6% (12) | CWE-20 | Improper Input Validation |
3% (7) | CWE-502 | Deserialization of Untrusted Data |
3% (6) | CWE-693 | Protection Mechanism Failure |
2% (5) | CWE-287 | Improper Authentication |
1% (3) | CWE-770 | Allocation of Resources Without Limits or Throttling |
1% (3) | CWE-254 | Security Features |
1% (3) | CWE-203 | Information Exposure Through Discrepancy |
1% (3) | CWE-59 | Improper Link Resolution Before File Access ('Link Following') |
1% (2) | CWE-400 | Uncontrolled Resource Consumption ('Resource Exhaustion') |
1% (2) | CWE-384 | Session Fixation |
0% (1) | CWE-772 | Missing Release of Resource after Effective Lifetime |
0% (1) | CWE-755 | Improper Handling of Exceptional Conditions |
0% (1) | CWE-732 | Incorrect Permission Assignment for Critical Resource |
0% (1) | CWE-613 | Insufficient Session Expiration |
0% (1) | CWE-399 | Resource Management Errors |
0% (1) | CWE-367 | Time-of-check Time-of-use (TOCTOU) Race Condition |
0% (1) | CWE-362 | Race Condition |
0% (1) | CWE-345 | Insufficient Verification of Data Authenticity |
0% (1) | CWE-330 | Use of Insufficiently Random Values |
0% (1) | CWE-326 | Inadequate Encryption Strength |
SAINT Exploits
Description | Link |
---|---|
Jenkins groovy.util.Expando Java deserialization vulnerability | More info here |
Open Source Vulnerability Database (OSVDB)
id | Description |
---|---|
77314 | Jenkins winstone Servlet Container Error Message XSS |
Snort® IPS/IDS
Date | Description |
---|---|
2020-03-12 | Jenkins Stapler web framework Accept-Language Header directory traversal attempt RuleID : 53064 - Type : SERVER-WEBAPP - Revision : 1 |
2019-11-21 | Jenkins CLI arbitrary Java object deserialization attempt RuleID : 51961 - Type : SERVER-WEBAPP - Revision : 2 |
2019-06-11 | Jenkins CI Server ASTTest code execution attempt RuleID : 50041 - Type : SERVER-WEBAPP - Revision : 2 |
2018-04-03 | Jenkins Java SignedObject deserialization command execution attempt RuleID : 45790 - Type : SERVER-WEBAPP - Revision : 1 |
2016-06-14 | Jenkins CI Server insecure deserialization command execution attempt RuleID : 38894 - Type : SERVER-WEBAPP - Revision : 2 |
2016-03-29 | Java Library CommonsCollection unauthorized serialized object attempt RuleID : 37860 - Type : SERVER-WEBAPP - Revision : 5 |
2016-03-29 | Java Library CommonsCollection unauthorized serialized object attempt RuleID : 37859 - Type : SERVER-WEBAPP - Revision : 6 |
2016-03-14 | Java Library CommonsCollection unauthorized serialized object attempt RuleID : 36826 - Type : SERVER-OTHER - Revision : 11 |
2014-03-13 | Win.Trojan.Sdconsent outbound connection RuleID : 29644 - Type : MALWARE-CNC - Revision : 5 |
Nessus® Vulnerability Scanner
id | Description |
---|---|
2018-12-07 | Name: A job scheduling and management system hosted on the remote web server is aff... File: jenkins_2_154.nasl - Type: ACT_GATHER_INFO |
2018-10-16 | Name: A job scheduling and management system hosted on the remote web server is aff... File: jenkins_2_146.nasl - Type: ACT_GATHER_INFO |
2018-09-06 | Name: A job scheduling and management system hosted on the remote web server is aff... File: jenkins_2_138.nasl - Type: ACT_GATHER_INFO |
2018-08-09 | Name: A job scheduling and management system hosted on the remote web server is aff... File: jenkins_2_133.nasl - Type: ACT_GATHER_INFO |
2018-07-20 | Name: The remote FreeBSD host is missing one or more security-related updates. File: freebsd_pkg_20a1881e8a9e11e8bddfd017c2ca229d.nasl - Type: ACT_GATHER_INFO |
2018-05-03 | Name: A job scheduling and management system hosted on the remote web server is aff... File: jenkins_2_116.nasl - Type: ACT_GATHER_INFO |
2018-02-22 | Name: A job scheduling and management system hosted on the remote web server is aff... File: jenkins_2_107.nasl - Type: ACT_GATHER_INFO |
2018-02-15 | Name: The remote FreeBSD host is missing one or more security-related updates. File: freebsd_pkg_5d374fbbbae345dbafc0795684ac7353.nasl - Type: ACT_GATHER_INFO |
2018-02-01 | Name: A job scheduling and management system hosted on the remote web server is aff... File: jenkins_2_95.nasl - Type: ACT_GATHER_INFO |
2017-12-15 | Name: The Jenkins software installed on the remote host is affected by a cross-site... File: jenkins_security624.nasl - Type: ACT_GATHER_INFO |
2017-05-04 | Name: A job scheduling and management system hosted on the remote web server is aff... File: jenkins_2_57.nasl - Type: ACT_GATHER_INFO |
2017-04-27 | Name: The remote FreeBSD host is missing one or more security-related updates. File: freebsd_pkg_631c47109be54a809310eb2847fe24dd.nasl - Type: ACT_GATHER_INFO |
2017-03-08 | Name: The remote web server hosts a job scheduling and management system that is af... File: jenkins_security_advisory_2017-02-01.nasl - Type: ACT_GATHER_INFO |
2017-03-06 | Name: The remote Fedora host is missing one or more security updates. File: fedora_2016-93679a91df.nasl - Type: ACT_GATHER_INFO |
2017-02-02 | Name: The remote FreeBSD host is missing one or more security-related updates. File: freebsd_pkg_5cfa9d0c73d74642af4f28fbed9e9404.nasl - Type: ACT_GATHER_INFO |
2016-12-01 | Name: The remote Fedora host is missing one or more security updates. File: fedora_2016-368780879d.nasl - Type: ACT_GATHER_INFO |
2016-11-16 | Name: The remote FreeBSD host is missing one or more security-related updates. File: freebsd_pkg_27eee66d947444a5b83021ec12a1c307.nasl - Type: ACT_GATHER_INFO |
2016-07-14 | Name: The remote Fedora host is missing a security update. File: fedora_2016-fd6100dd68.nasl - Type: ACT_GATHER_INFO |
2016-07-14 | Name: The remote Fedora host is missing a security update. File: fedora_2016-f7e7a6067d.nasl - Type: ACT_GATHER_INFO |
2016-07-14 | Name: The remote Fedora host is missing a security update. File: fedora_2016-9ba53cf8a2.nasl - Type: ACT_GATHER_INFO |
2016-05-12 | Name: The remote FreeBSD host is missing one or more security-related updates. File: freebsd_pkg_e387834a17ef11e699477054d2909b71.nasl - Type: ACT_GATHER_INFO |
2016-03-18 | Name: The remote Fedora host is missing one or more security updates. File: fedora_2016-641c8b4eb2.nasl - Type: ACT_GATHER_INFO |
2016-03-18 | Name: The remote Fedora host is missing one or more security updates. File: fedora_2016-0f490eea10.nasl - Type: ACT_GATHER_INFO |
2016-03-14 | Name: The remote web server hosts a job scheduling and management system that is af... File: jenkins_1_650.nasl - Type: ACT_GATHER_INFO |
2016-03-07 | Name: The remote web server is affected by a remote code execution vulnerability. File: jenkins_security232.nasl - Type: ACT_GATHER_INFO |