Critical Jenkins Server Vulnerability Could Leak Sensitive Information

guest · Aug 18, 2020

Critical Jenkins Server Vulnerability Could Leak Sensitive Information
August 18, 2020
https://thehackernews.com/2020/08/jenkins-server-vulnerability.html

Jenkins—a popular open-source automation server software—published an advisory on Monday concerning a critical vulnerability in the Jetty web server that could result in memory corruption and cause confidential information to be disclosed.

Tracked as CVE-2019-17638, the flaw has a CVSS rating of 9.4 and impacts Eclipse Jetty versions 9.4.27.v20200227 to 9.4.29.v20200521—a full-featured tool that provides a Java HTTP server and web container for use in software frameworks.
Click to expand...

After the security implications were disclosed, the vulnerability was addressed in Jetty 9.4.30.v20200611 released last month. Jenkins, which bundles Jetty via a command-line interface called Winstone, has patched the flaw in its utility in Jenkins 2.243 and Jenkins LTS 2.235.5 released yesterday.
It's recommended that Jenkins users update their software to the latest version to mitigate the buffer corruption flaw.
Click to expand...

Log in or Sign up

Critical Jenkins Server Vulnerability Could Leak Sensitive Information

guest Guest

Log in or Sign up

Critical Jenkins Server Vulnerability Could Leak Sensitive Information

guest Guest

Useful Searches