PT-2023-24694 · Jenkins · Jenkins Plug-In For Servicenow Devops+1

CVE-2023-3414

·

Publicado

2023-07-26

·

Atualizado

2023-08-01

CVSS v3.1

6.1

Média

VetorAV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Jenkins Plug-in for ServiceNow DevOps versions prior to 1.38.1
Description A cross-site request forgery issue exists that could cause the unwanted exposure of sensitive information if exploited successfully.
Recommendations For versions prior to 1.38.1, apply the 1.38.1 version of the Jenkins plug-in for ServiceNow DevOps on your Jenkins server. No changes are required on your instances of the Now Platform.

Exploit

Correção

CSRF

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-352CWE-200

Identificadores relacionados

CVE-2023-3414
GHSA-RCHX-RVH2-VX5J

Produtos afetados

Jenkins
Jenkins Plug-In For Servicenow Devops