Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to access other users' "My Views".

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP
    endpoint, allowing attackers with Overall/Read permission to access other users' "My Views".
    (CVE-2024-43045)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the db8fa362-0ccb-4aa8-9220-72b7763e9a4a advisory.

    Jenkins Security Advisory:
    Arbitrary file read vulnerability through agent connections can lead to RCE     Missing permission check allows accessing other users' My Views

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its its self-reported version number, the version of Jenkins running on the remote web server is Jenkins LTS prior to 2.452.4 or Jenkins weekly prior to 2.471. It is, therefore, affected by multiple vulnerabilities:

  - Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the     Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library.
    (CVE-2024-43044)

  - Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP     endpoint, allowing attackers with Overall/Read permission to access other users' My Views.
    (CVE-2024-43045)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
412797	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-8pv9-qh96-9hc6)	Tenable Cloud Security	SCA Checks	medium
412797	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-8pv9-qh96-9hc6)	Tenable Self-Hosted Container Security	SCA Checks	medium
205217	FreeBSD : jenkins -- multiple vulnerabilities (db8fa362-0ccb-4aa8-9220-72b7763e9a4a)	Nessus	FreeBSD Local Security Checks	high
205143	Jenkins LTS < 2.452.4 / Jenkins weekly < 2.471 Multiple Vulnerabilities	Nessus	CGI abuses	high

Detections

Analytics

CVE-2024-43045

medium

Tenable Plugins

medium

medium

high

high