This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Detail
Vendor Jenkins First view 2011-12-01
Product Jenkins Last view 2024-01-24
Version 1.388 Type Application
Update *  
Edition *  
Language *  
Sofware Edition -  
Target Software *  
Target Hardware *  
Other *  
 
CPE Product cpe:2.3:a:jenkins:jenkins

Activity : Overall

Related : CVE

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
  Date Alert Description
8.8 2024-01-24 CVE-2024-23898

Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijacking (CSWSH) vulnerability, allowing attackers to execute CLI commands on the Jenkins controller.

9.8 2024-01-24 CVE-2024-23897

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.

7.5 2023-10-10 CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

7.5 2023-10-10 CVE-2023-36478

Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to exceed their size limit. `MetaDataBuilder.java` determines if a header name or value exceeds the size limit, and throws an exception if the limit is exceeded. However, when length is very large and huffman is true, the multiplication by 4 in line 295 will overflow, and length will become negative. `(_size+length)` will now be negative, and the check on line 296 will not be triggered. Furthermore, `MetaDataBuilder.checkSize` allows for user-entered HPACK header value sizes to be negative, potentially leading to a very large buffer allocation later on when the user-entered size is multiplied by 2. This means that if a user provides a negative length value (or, more precisely, a length value which, when multiplied by the 4/3 fudge factor, is negative), and this length value is a very large positive number when multiplied by 2, then the user can cause a very large buffer to be allocated on the server. Users of HTTP/2 can be impacted by a remote denial of service attack. The issue has been fixed in versions 11.0.16, 10.0.16, and 9.4.53. There are no known workarounds.

8.1 2023-09-20 CVE-2023-43498

In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using MultipartFormDataParser creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used.

8.1 2023-09-20 CVE-2023-43497

In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using the Stapler web framework creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used.

8.8 2023-09-20 CVE-2023-43496

Jenkins 2.423 and earlier, LTS 2.414.1 and earlier creates a temporary file in the system temporary directory with the default permissions for newly created files when installing a plugin from a URL, potentially allowing attackers with access to the system temporary directory to replace the file before it is installed in Jenkins, potentially resulting in arbitrary code execution.

5.4 2023-09-20 CVE-2023-43495

Jenkins 2.423 and earlier, LTS 2.414.1 and earlier does not escape the value of the 'caption' constructor parameter of 'ExpandableDetailsNote', resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control this parameter.

4.3 2023-09-20 CVE-2023-43494

Jenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not exclude sensitive build variables (e.g., password parameter values) from the search in the build history widget, allowing attackers with Item/Read permission to obtain values of sensitive variables used in builds by iteratively testing different characters until the correct sequence is discovered.

5.4 2023-07-26 CVE-2023-39151

Jenkins 2.415 and earlier, LTS 2.401.2 and earlier does not sanitize or properly encode URLs in build logs when transforming them into hyperlinks, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control build log contents.

8 2023-06-14 CVE-2023-35141

In Jenkins 2.399 and earlier, LTS 2.387.3 and earlier, POST requests are sent in order to load the list of context actions. If part of the URL includes insufficiently escaped user-provided values, a victim may be tricked into sending a POST request to an unexpected endpoint by opening a context menu.

5.3 2023-03-10 CVE-2023-27904

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers.

4.4 2023-03-10 CVE-2023-27903

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used.

4.3 2023-03-10 CVE-2023-27902

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows attackers with Item/Workspace permission to access their contents.

7.5 2023-03-10 CVE-2023-27901

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in org.kohsuke.stapler.RequestImpl, allowing attackers to trigger a denial of service.

7.5 2023-03-10 CVE-2023-27900

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service.

7 2023-03-10 CVE-2023-27899

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a plugin for installation, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used, potentially resulting in arbitrary code execution.

9.6 2023-03-10 CVE-2023-27898

Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins version a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide plugins to the configured update sites and have this message shown by Jenkins instances.

7.5 2022-10-19 CVE-2022-43429

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to read arbitrary files on the Jenkins controller file system.

5.3 2022-10-19 CVE-2022-43428

Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

5.3 2022-10-19 CVE-2022-43424

Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

5.3 2022-10-19 CVE-2022-43423

Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

5.3 2022-10-19 CVE-2022-43422

Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system properties from the Jenkins controller process.

8.8 2022-10-19 CVE-2022-43416

Jenkins Katalon Plugin 1.0.32 and earlier implements an agent/controller message that does not limit where it can be executed and allows invoking Katalon with configurable arguments, allowing attackers able to control agent processes to invoke Katalon on the Jenkins controller with attacker-controlled version, install location, and arguments, and attackers additionally able to create files on the Jenkins controller (e.g., attackers with Item/Configure permission could archive artifacts) to invoke arbitrary OS commands.

5.4 2022-09-21 CVE-2022-41224

Jenkins 2.367 through 2.369 (both inclusive) does not escape tooltips of the l:helpIcon UI component used for some help icons on the Jenkins web UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control tooltips for this component.

CWE : Common Weakness Enumeration

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
%idName
29% (54) CWE-79 Failure to Preserve Web Page Structure ('Cross-site Scripting')
14% (27) CWE-200 Information Exposure
7% (14) CWE-352 Cross-Site Request Forgery (CSRF)
7% (14) CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path ...
6% (13) CWE-264 Permissions, Privileges, and Access Controls
5% (11) CWE-20 Improper Input Validation
4% (8) CWE-502 Deserialization of Untrusted Data
2% (5) CWE-287 Improper Authentication
2% (4) CWE-59 Improper Link Resolution Before File Access ('Link Following')
1% (3) CWE-770 Allocation of Resources Without Limits or Throttling
1% (3) CWE-400 Uncontrolled Resource Consumption ('Resource Exhaustion')
1% (3) CWE-254 Security Features
1% (3) CWE-203 Information Exposure Through Discrepancy
0% (1) CWE-772 Missing Release of Resource after Effective Lifetime
0% (1) CWE-755 Improper Handling of Exceptional Conditions
0% (1) CWE-732 Incorrect Permission Assignment for Critical Resource
0% (1) CWE-613 Insufficient Session Expiration
0% (1) CWE-434 Unrestricted Upload of File with Dangerous Type
0% (1) CWE-399 Resource Management Errors
0% (1) CWE-384 Session Fixation
0% (1) CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
0% (1) CWE-362 Race Condition
0% (1) CWE-346 Origin Validation Error
0% (1) CWE-345 Insufficient Verification of Data Authenticity
0% (1) CWE-330 Use of Insufficiently Random Values

SAINT Exploits

Description Link
Jenkins groovy.util.Expando Java deserialization vulnerability More info here

Open Source Vulnerability Database (OSVDB)

id Description
77314 Jenkins winstone Servlet Container Error Message XSS

Snort® IPS/IDS

Date Description
2020-03-12 Jenkins Stapler web framework Accept-Language Header directory traversal attempt
RuleID : 53064 - Type : SERVER-WEBAPP - Revision : 1
2019-11-21 Jenkins CLI arbitrary Java object deserialization attempt
RuleID : 51961 - Type : SERVER-WEBAPP - Revision : 2
2019-06-11 Jenkins CI Server ASTTest code execution attempt
RuleID : 50041 - Type : SERVER-WEBAPP - Revision : 2
2018-04-03 Jenkins Java SignedObject deserialization command execution attempt
RuleID : 45790 - Type : SERVER-WEBAPP - Revision : 1
2016-06-14 Jenkins CI Server insecure deserialization command execution attempt
RuleID : 38894 - Type : SERVER-WEBAPP - Revision : 2
2016-03-29 Java Library CommonsCollection unauthorized serialized object attempt
RuleID : 37860 - Type : SERVER-WEBAPP - Revision : 5
2016-03-29 Java Library CommonsCollection unauthorized serialized object attempt
RuleID : 37859 - Type : SERVER-WEBAPP - Revision : 6
2016-03-14 Java Library CommonsCollection unauthorized serialized object attempt
RuleID : 36826 - Type : SERVER-OTHER - Revision : 11
2014-03-13 Win.Trojan.Sdconsent outbound connection
RuleID : 29644 - Type : MALWARE-CNC - Revision : 5

Nessus® Vulnerability Scanner

This CPE have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
id Description
2018-12-07 Name: A job scheduling and management system hosted on the remote web server is aff...
File: jenkins_2_154.nasl - Type: ACT_GATHER_INFO
2018-10-16 Name: A job scheduling and management system hosted on the remote web server is aff...
File: jenkins_2_146.nasl - Type: ACT_GATHER_INFO
2018-09-06 Name: A job scheduling and management system hosted on the remote web server is aff...
File: jenkins_2_138.nasl - Type: ACT_GATHER_INFO
2018-08-09 Name: A job scheduling and management system hosted on the remote web server is aff...
File: jenkins_2_133.nasl - Type: ACT_GATHER_INFO
2018-07-20 Name: The remote FreeBSD host is missing one or more security-related updates.
File: freebsd_pkg_20a1881e8a9e11e8bddfd017c2ca229d.nasl - Type: ACT_GATHER_INFO
2018-05-03 Name: A job scheduling and management system hosted on the remote web server is aff...
File: jenkins_2_116.nasl - Type: ACT_GATHER_INFO
2018-02-22 Name: A job scheduling and management system hosted on the remote web server is aff...
File: jenkins_2_107.nasl - Type: ACT_GATHER_INFO
2018-02-15 Name: The remote FreeBSD host is missing one or more security-related updates.
File: freebsd_pkg_5d374fbbbae345dbafc0795684ac7353.nasl - Type: ACT_GATHER_INFO
2018-02-01 Name: A job scheduling and management system hosted on the remote web server is aff...
File: jenkins_2_95.nasl - Type: ACT_GATHER_INFO
2017-12-15 Name: The Jenkins software installed on the remote host is affected by a cross-site...
File: jenkins_security624.nasl - Type: ACT_GATHER_INFO
2017-05-04 Name: A job scheduling and management system hosted on the remote web server is aff...
File: jenkins_2_57.nasl - Type: ACT_GATHER_INFO
2017-04-27 Name: The remote FreeBSD host is missing one or more security-related updates.
File: freebsd_pkg_631c47109be54a809310eb2847fe24dd.nasl - Type: ACT_GATHER_INFO
2017-03-08 Name: The remote web server hosts a job scheduling and management system that is af...
File: jenkins_security_advisory_2017-02-01.nasl - Type: ACT_GATHER_INFO
2017-03-06 Name: The remote Fedora host is missing one or more security updates.
File: fedora_2016-93679a91df.nasl - Type: ACT_GATHER_INFO
2017-02-02 Name: The remote FreeBSD host is missing one or more security-related updates.
File: freebsd_pkg_5cfa9d0c73d74642af4f28fbed9e9404.nasl - Type: ACT_GATHER_INFO
2016-12-01 Name: The remote Fedora host is missing one or more security updates.
File: fedora_2016-368780879d.nasl - Type: ACT_GATHER_INFO
2016-11-16 Name: The remote FreeBSD host is missing one or more security-related updates.
File: freebsd_pkg_27eee66d947444a5b83021ec12a1c307.nasl - Type: ACT_GATHER_INFO
2016-07-14 Name: The remote Fedora host is missing a security update.
File: fedora_2016-fd6100dd68.nasl - Type: ACT_GATHER_INFO
2016-07-14 Name: The remote Fedora host is missing a security update.
File: fedora_2016-f7e7a6067d.nasl - Type: ACT_GATHER_INFO
2016-07-14 Name: The remote Fedora host is missing a security update.
File: fedora_2016-9ba53cf8a2.nasl - Type: ACT_GATHER_INFO
2016-05-12 Name: The remote FreeBSD host is missing one or more security-related updates.
File: freebsd_pkg_e387834a17ef11e699477054d2909b71.nasl - Type: ACT_GATHER_INFO
2016-03-18 Name: The remote Fedora host is missing one or more security updates.
File: fedora_2016-641c8b4eb2.nasl - Type: ACT_GATHER_INFO
2016-03-18 Name: The remote Fedora host is missing one or more security updates.
File: fedora_2016-0f490eea10.nasl - Type: ACT_GATHER_INFO
2016-03-14 Name: The remote web server hosts a job scheduling and management system that is af...
File: jenkins_1_650.nasl - Type: ACT_GATHER_INFO
2016-03-07 Name: The remote web server is affected by a remote code execution vulnerability.
File: jenkins_security232.nasl - Type: ACT_GATHER_INFO