https://insinuator.net/tags/jenkins/ Recent content in Jenkins on Insinuator.net - Bold Statements Hugo en-us Fri, 01 Jul 2016 00:00:00 +0000 https://insinuator.net/2016/07/jenkins-remoting-rce-ii-the-return-of-the-ysoserial/ Fri, 01 Jul 2016 00:00:00 +0000 https://insinuator.net/2016/07/jenkins-remoting-rce-ii-the-return-of-the-ysoserial/ <p><img src="https://www.insinuator.net/wp-content/uploads/2016/06/headshot.png" alt="Jenkins Logo"></p> <p><a href="http://jenkins-ci.org/">Jenkins</a> is a continuous integration server, widely used in Java environments for building automation and deployment. The project recently disclosed an unauthenticated remote code execution vulnerability discovered by Moritz Bechler. Depending on the development environment, a Jenkins server can be a critical part of the infrastructure: It often creates the application packages that later will be deployed on production application servers. If an attacker can execute arbitrary code, s/he can easily manipulate those packages and inject additional code. Another scenario would be that the attacker stealing credentials, like passwords, private keys that are used for authentication in the deployment process or similar.</p>