Shulou(Shulou.com)06/01 Report--

This article to share with you is about Jenkins Git client plug-in RCE vulnerability CVE-2019-10392 recurrence example analysis, Xiaobian think quite practical, so share to everyone to learn, I hope you can read this article after some harvest, not much to say, follow Xiaobian to see it.

0x00 Introduction

Jenkins is an open source software project, a Java-based continuous integration tool for monitoring continuous repetitive work, designed to provide an open and easy-to-use software platform that makes continuous integration of software possible.

0x01 Vulnerability Overview

System command execution vulnerability in the Git client plugin, which enables command execution in a manner that allows attackers with Job/Configure privileges to execute arbitrary system commands on the Jenkins master server as OS users whose Jenkins processes are running.

0x02 Scope of influence

Git client Plugin

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.