Uncover the vulnerabilities that led to a massive ransomware attack in India's banking payment systems. Understand how a misconfigured Jenkins server was exploited.
CVE-2024-23897
After Check Point published a technical writeup on CVE-2024-21413, the PoC code targeting the critical issue was published on GitHub
The technical details and proof-of-concept (PoC) code targeting a critical CVE-2024-23897 vulnerability in Jenkins was published
CVE-2024-23897, (CVSS 9.8), opens the door to arbitrary file reads through the CLI, potentially culminating in remote code execution (RCE).