/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2024-43044

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-43044

CGA ID

CGA-p3h6-c7gr-j772

Severity

Unknown

Description

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the ClassLoaderProxy#fetchJar method in the Remoting library.

References

  • https://images.chainguard.dev/security/CGA-p3h6-c7gr-j772
  • https://www.jenkins.io/security/advisory/2024-08-07/#SECURITY-3430

Affected packages

Safe Source for Open Source™
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs

Why Chainguard

Container Image SecurityVulnerability RemediationCompliance and Risk MitigationSoftware Supply Chain SecurityAI/ML Security

Customers

Customer StoriesChainguard Love

Company

About UsPricingContact UsOpen SourceCareersNewsroomLegal

Resources

Unchained BlogEventsTrust CenterDocumentation