CISA Known Exploited Vulnerability

CVE-2024-23897 Ransomware

Jenkins · Jenkins Command Line Interface (CLI)

Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

Date added 2024-08-19

BOD 22-01 due date 2024-09-09

CWE CWE-27

Ransomware Known

CISA description

Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes & references

https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314
https://nvd.nist.gov/vuln/detail/CVE-2024-23897

Where this lands in 800-53

Vulnerability data triggers these controls during assessment and continuous monitoring.

RA-5 · Vulnerability Monitoring and Scanning
SI-2 · Flaw Remediation
CM-6 · Configuration Settings
SI-7 · Software, Firmware, and Information Integrity
CM-8 · System Component Inventory

External lookups

NVD · CVE-2024-23897
CVE.org · CVE-2024-23897
CISA KEV catalog (canonical)