CVE-2024-23897—Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

Vulnerability Name

Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

Description

Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

KNOWN

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314
• https://nvd.nist.gov/vuln/detail/CVE-2024-23897

Related News Articles

• CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware AttacksAugust 20, 2024
• CISA warns of Jenkins RCE bug exploited in ransomware attacksAugust 19, 2024

Related Weaknesses

• CWE-27