DevOps Alert: 12,000 Jenkins Servers Exposed to DoS Attacks

guest · Feb 11, 2020

DevOps Alert: 12,000 Jenkins Servers Exposed to DoS Attacks
February 11, 2020
https://www.infosecurity-magazine.com/news/12000-jenkins-servers-exposed-to/

Security researchers are warning that 12,000 cloud automation servers around the world could be hijacked to launch denial of service (DoS) attacks.

Radware issued an emergency response team threat alert yesterday after discovering 12,802 Jenkins servers that are still vulnerable to a flaw patched at the end of January.
Discovered by Adam Thorn of the University of Cambridge, CVE-2020-2100 affects Jenkins 2.218 and earlier as well as LTS 2.204.1 and earlier.

“Jenkins’ vulnerability is caused by an auto-discovery protocol that is enabled by default and exposed in publicly facing servers,” explained Radware security evangelist, Pascal Geenens.
The bug could enable attackers to compromise exposed servers to launch two different types of DoS: an amplification attack and an infinite loop attack.
Click to expand...

Log in or Sign up

DevOps Alert: 12,000 Jenkins Servers Exposed to DoS Attacks

guest Guest

Log in or Sign up

DevOps Alert: 12,000 Jenkins Servers Exposed to DoS Attacks

guest Guest

Useful Searches