Jenkins 脆弱性

タイムライン

タイプ

Continuous Integration Software33
Application Server Software1

製品

Jenkins HTML Publisher Plugin3
Jenkins docker-build-step Plugin2
Jenkins Subversion Partial Release Manager Plugin2
Jenkins Delphix Plugin2
Jenkins-ci Monitoring plugin2

修復

Official Fix4
Temporary Fix0
Workaround0
Unavailable0
Not Defined30

悪用可能性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined34

アクセスベクター

Not Defined0
Physical0
Local1
Adjacent12
Network21

認証

Not Defined0
High0
Low23
None11

ユーザー操作

Not Defined0
Required15
None19

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤413
≤59
≤68
≤74
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤413
≤59
≤68
≤74
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤416
≤59
≤68
≤71
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤53
≤61
≤73
≤80
≤92
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k8
<2k24
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

本日のエクスプロイト

<1k29
<2k5
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (28): AWS Global Configuration Plugin (1), AppSpider Plugin (1), BearyChat Plugin (1), Bitbucket Branch Source Plugin (1), Blue Ocean Plugin (1), Build Monitor View Plugin (1), Delphix Plugin (2), Deploy WebLogic Plugin (1), Exclusion (1), GitBucket Plugin (1), HTML Publisher Plugin (3), MQ Notifier Plugin (1), Monitoring plugin (2), OWASP Dependency-Check Plugin (1), OWASP Dependency-Track Plugin (1), Promoted Builds Plugin (1), Realize Orchestrator Plugin (1), SQLPlus Script Runner Plugin (1), Sonar Quality Gates Plugin (1), Subversion-plugin (1), Subversion Partial Release Manager Plugin (2), Subversion Plugin (1), Support Core Plugin (1), Team Foundation Server Plugin (1), TestComplete Support Plugin (1), docker-build-step Plugin (2), iceScrum Plugin (1), update-center2 (1)

Link to Vendor Website: https://jenkins.io/

公開済みBaseTemp脆弱性Prod悪修復EPSSCTICVE
2024年03月06日4.34.3Jenkins docker-build-step Plugin Connection Test 未知の脆弱性Continuous Integration SoftwareNot DefinedNot Defined0.000430.04CVE-2024-2215
2024年03月06日5.55.5Jenkins Subversion Partial Release Manager Plugin 特権昇格Continuous Integration SoftwareNot DefinedNot Defined0.000430.05CVE-2024-28159
2024年03月06日3.73.7Jenkins Delphix Plugin Data Control Tower Connection 弱い認証Continuous Integration SoftwareNot DefinedNot Defined0.000430.04CVE-2024-28161
2024年03月06日3.53.5Jenkins Build Monitor View Plugin クロスサイトスクリプティングContinuous Integration SoftwareNot DefinedNot Defined0.000430.02CVE-2024-28156
2024年03月06日3.53.5Jenkins iceScrum Plugin Project URL クロスサイトスクリプティングContinuous Integration SoftwareNot DefinedNot Defined0.000430.02CVE-2024-28160
2024年03月06日4.34.3Jenkins Subversion Partial Release Manager Plugin 未知の脆弱性Continuous Integration SoftwareNot DefinedNot Defined0.000430.05CVE-2024-28158
2024年03月06日3.53.5Jenkins GitBucket Plugin Job Configuration クロスサイトスクリプティングContinuous Integration SoftwareNot DefinedNot Defined0.000430.02CVE-2024-28157
2024年03月06日3.53.5Jenkins MQ Notifier Plugin Debug Information 情報の漏洩Continuous Integration SoftwareNot DefinedNot Defined0.000430.08CVE-2024-28154
2024年03月06日3.53.5Jenkins OWASP Dependency-Check Plugin クロスサイトスクリプティングContinuous Integration SoftwareNot DefinedNot Defined0.000430.06CVE-2024-28153
2024年03月06日3.53.5Jenkins HTML Publisher Plugin クロスサイトスクリプティングContinuous Integration SoftwareNot DefinedNot Defined0.000430.04CVE-2024-28150

24 非表示のエントリあり

🔒 Login Required

You need to signup and login to see more of the remaining 24 results.

◂ 前概要次 ▸

Interested in the pricing of exploits?

See the underground prices here!