VDB
CVE-2024-28156
CVE-2024-28156
PUBLISHED
Jenkins ist ein erweiterbarer, webbasierter Integration Server zur kontinuierlichen Unterstützung bei Softwareentwicklungen aller Art.
EPSS 38.90% · 97.3th percentile
Risk Scores
EPSS Score
38.90%
97.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Dell Data Protection Advisor <19.12 | |
| Jenkins | Jenkins Jenkins plugins | |
| Red Hat | Red Hat Enterprise Linux |
Exploit Intelligence
- CIRCL seen: CVE-2024-28156 (circl-sighting)
- CIRCL seen: CVE-2024-28156 (circl-sighting)
- Jenkins Security Advisory 2024-03-06 (circl)
- http://www.openwall.com/lists/oss-security/2024/03/06/3 (circl)
Timeline
- Mar 6, 2024 CVE Published
- Mar 6, 2024 PoC Published
- Mar 7, 2024 EPSS Score
- Apr 2, 2024 EPSS Score
- May 25, 2024 EPSS Score
- Jun 21, 2024 EPSS Score
- Aug 13, 2024 EPSS Score
- Sep 8, 2024 EPSS Score
- Oct 4, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Nov 7, 2024 Coalition ESS Score
- Nov 26, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0564.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0564 advisory
- https://www.jenkins.io/security/advisory/2024-03-06/ advisory
- https://access.redhat.com/errata/RHSA-2024:3636 advisory
- https://access.redhat.com/errata/RHSA-2024:3635 advisory
- https://access.redhat.com/errata/RHSA-2024:4597 advisory
- https://www.dell.com/support/kbdoc/en-us/000281732/dsa-2025-075-security-update-for-dell-data-protection-advisor-for-multiple-component-vulnerabilities advisory