VDB
ANCHORE-2024-43044
ANCHORE-2024-43044
PUBLISHED
Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jenkins Project | Jenkins | 2.453, 2.463, 0 |
Timeline
- Aug 7, 2024 CVE Published