Jenkins Vulnerability Estimated to Affect 43% of Cloud Environments

Originally published by Orca Security.Written by Bar Kaduri and Deborah Galea. On January 24th, Jenkins, a widely used open source CI/CD automation tool, released a security advisory regarding a new critical vulnerability that could allow arbitrary file read, possibly leading to Remote Code Execution (RCE). The vulnerability was discovered by Sonar Security on November 13th, and was assigned CVE-2024-23897 with a CVSS score of 9.8.The vulnerability is very easy to discover and exploit, and co...

advisory automation cloud cloud environments code code execution critical critical vulnerability environments file january jenkins open source orca orca security rce remote code remote code execution security security advisory sonar tool vulnerability written