Conversation
New assessment for topic: CVE-2024-43044

Topic description: "Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library. ..."

"[CVE-2024-43044](https://nvd.nist.gov/vuln/detail/CVE-2024-43044) is an arbitrary file read vulnerability in Jenkins Automation Server, and it's exploitable via [Jenkins Remoting](https://github.com/jenkinsci/remoting) ..."

Link: https://attackerkb.com/assessments/37724f7c-2b1d-43ef-9d31-48fff258f4d3
0
0
0