Brian Hysell

The vulnerability is related to a missing authentication mechanism for a critical function in Palo Alto Networks Expedition, allowing an attacker with network access to take over an admin account and potentially access configuration secrets, credentials, and other data. This issue has been actively exploited by attackers, and it is recommended to update to the latest version to mitigate the risks.

The issue is related to an arbitrary file write vulnerability. This vulnerability allows attackers with Overall/Read permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content. The vulnerability is due to incorrect restriction of a directory path with limited access.

The issue arises from the Jenkins Nested View Plugin not configuring its XML transformer to prevent XML external entity (XXE) attacks. This allows attackers who can configure views to have Jenkins parse a crafted view XML definition, using external entities for extraction of secrets from the Jenkins controller or for server-side request forgery.