{"id":770,"date":"2024-01-26T09:51:37","date_gmt":"2024-01-26T12:51:37","guid":{"rendered":"https:\/\/techsecurity.com.br\/?p=770"},"modified":"2024-01-26T09:51:38","modified_gmt":"2024-01-26T12:51:38","slug":"vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce","status":"publish","type":"post","link":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/","title":{"rendered":"Vulnerabilidade cr\u00edtica do Jenkins exp\u00f5e servidores a ataques RCE"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Os mantenedores do software de automa\u00e7\u00e3o de integra\u00e7\u00e3o cont\u00ednua (CI\/CD) de c\u00f3digo aberto Jenkins resolveram nove falhas de seguran\u00e7a, incluindo um bug cr\u00edtico que, se explorado com sucesso, pode resultar em execu\u00e7\u00e3o remota de c\u00f3digo (RCE).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-23897\">CVE-2024-23897<\/a> foi descrito como uma vulnerabilidade de leitura arbitr\u00e1ria de arquivos por meio da interface de linha de comando (<a href=\"https:\/\/www.jenkins.io\/doc\/book\/managing\/cli\/\">CLI<\/a>) integrada.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cJenkins usa a biblioteca args4j para analisar argumentos e op\u00e7\u00f5es de comando no controlador Jenkins ao processar comandos CLI\u201d<\/em>, disseram os mantenedores em um <a href=\"https:\/\/www.jenkins.io\/security\/advisory\/2024-01-24\/\">comunicado <\/a>de quarta-feira.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>&#8220;Este analisador de comando possui um recurso que substitui um caractere @ seguido por um caminho de arquivo em um argumento com o conte\u00fado do arquivo (expandAtFiles). Este recurso \u00e9 habilitado por padr\u00e3o e Jenkins 2.441 e anteriores, LTS 2.426.2 e anteriores n\u00e3o o desabilitam .&#8221;<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O exploit que explora o CVE-2024-23897 j\u00e1 se tornou publico e pode ser encontrado no github.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Um agente de amea\u00e7a poderia explorar essa peculiaridade para ler arquivos arbitr\u00e1rios no sistema de arquivos do controlador Jenkins usando a codifica\u00e7\u00e3o de caracteres padr\u00e3o do processo do controlador Jenkins.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Embora os invasores com permiss\u00e3o &#8220;Geral\/Leitura&#8221; possam ler arquivos inteiros, aqueles que n\u00e3o t\u00eam permiss\u00e3o podem ler as tr\u00eas primeiras linhas dos arquivos, dependendo dos comandos CLI.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Al\u00e9m disso, a defici\u00eancia poderia ser transformada em arma para ler arquivos bin\u00e1rios contendo chaves criptogr\u00e1ficas, embora com certas restri\u00e7\u00f5es. Desde que os segredos bin\u00e1rios possam ser extra\u00eddos, Jenkins diz que isso poderia abrir a porta para v\u00e1rios ataques:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Remote code execution via Resource Root URLs<\/li>\n\n\n\n<li>Remote code execution via &#8220;Remember me&#8221; cookie<\/li>\n\n\n\n<li>Remote code execution via stored cross-site scripting (XSS) attacks pelos logs de build<\/li>\n\n\n\n<li>Remote code execution via CSRF protection bypass<\/li>\n\n\n\n<li>Decrypt secrets armazenados no Jenkins<\/li>\n\n\n\n<li>Delete itens no Jenkins<\/li>\n\n\n\n<li>Download Java heap dump<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cEmbora os arquivos contendo dados bin\u00e1rios possam ser lidos, o recurso afetado tenta l\u00ea-los como strings usando a codifica\u00e7\u00e3o de caracteres padr\u00e3o do processo do controlador\u201d<\/em>, disse Jenkins.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>&#8220;\u00c9 prov\u00e1vel que isso fa\u00e7a com que alguns bytes n\u00e3o sejam lidos com \u00eaxito e sejam substitu\u00eddos por um valor de espa\u00e7o reservado. Quais bytes podem ou n\u00e3o ser lidos depende dessa codifica\u00e7\u00e3o de caracteres.&#8221;<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O pesquisador de seguran\u00e7a Yaniv Nizry foi creditado por descobrir e relatar a falha, que foi corrigida no Jenkins 2.442, LTS 2.426.3 desativando o recurso de analisador de comando.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Como solu\u00e7\u00e3o alternativa de curto prazo at\u00e9 que o patch possa ser aplicado, \u00e9 recomend\u00e1vel desligar o acesso \u00e0 CLI.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Os mantenedores do software de automa\u00e7\u00e3o de integra\u00e7\u00e3o cont\u00ednua (CI\/CD) de c\u00f3digo aberto Jenkins resolveram nove falhas de seguran\u00e7a, incluindo [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":771,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[19],"tags":[127,38],"class_list":["post-770","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-informativo","tag-jenkins","tag-rce"],"yoast_head":"<title>Vulnerabilidade cr\u00edtica do Jenkins exp\u00f5e servidores a ataques RCE - Tech Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidade cr\u00edtica do Jenkins exp\u00f5e servidores a ataques RCE - Tech Security\" \/>\n<meta property=\"og:description\" content=\"Os mantenedores do software de automa\u00e7\u00e3o de integra\u00e7\u00e3o cont\u00ednua (CI\/CD) de c\u00f3digo aberto Jenkins resolveram nove falhas de seguran\u00e7a, incluindo [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/\" \/>\n<meta property=\"og:site_name\" content=\"Tech Security\" \/>\n<meta property=\"article:published_time\" content=\"2024-01-26T12:51:37+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-01-26T12:51:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/01-26-jenkins-rce.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"942\" \/>\n\t<meta property=\"og:image:height\" content=\"587\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"redator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"redator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/\"},\"author\":{\"name\":\"redator\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\"},\"headline\":\"Vulnerabilidade cr\u00edtica do Jenkins exp\u00f5e servidores a ataques RCE\",\"datePublished\":\"2024-01-26T12:51:37+00:00\",\"dateModified\":\"2024-01-26T12:51:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/\"},\"wordCount\":452,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2024\\\/01\\\/01-26-jenkins-rce.jpg\",\"keywords\":[\"jenkins\",\"rce\"],\"articleSection\":[\"Informativo\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/\",\"name\":\"Vulnerabilidade cr\u00edtica do Jenkins exp\u00f5e servidores a ataques RCE - Tech Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2024\\\/01\\\/01-26-jenkins-rce.jpg\",\"datePublished\":\"2024-01-26T12:51:37+00:00\",\"dateModified\":\"2024-01-26T12:51:38+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/#primaryimage\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2024\\\/01\\\/01-26-jenkins-rce.jpg\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2024\\\/01\\\/01-26-jenkins-rce.jpg\",\"width\":942,\"height\":587},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2024\\\/01\\\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\\\/\\\/techsecurity.com.br\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilidade cr\u00edtica do Jenkins exp\u00f5e servidores a ataques RCE\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"name\":\"Tech Security\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/techsecurity.com.br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\",\"name\":\"Tech Security\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"width\":100,\"height\":89,\"caption\":\"Tech Security\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\",\"name\":\"redator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"caption\":\"redator\"},\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/author\\\/redator\\\/\"}]}<\/script>","yoast_head_json":{"title":"Vulnerabilidade cr\u00edtica do Jenkins exp\u00f5e servidores a ataques RCE - Tech Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/","og_locale":"pt_BR","og_type":"article","og_title":"Vulnerabilidade cr\u00edtica do Jenkins exp\u00f5e servidores a ataques RCE - Tech Security","og_description":"Os mantenedores do software de automa\u00e7\u00e3o de integra\u00e7\u00e3o cont\u00ednua (CI\/CD) de c\u00f3digo aberto Jenkins resolveram nove falhas de seguran\u00e7a, incluindo [&hellip;]","og_url":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/","og_site_name":"Tech Security","article_published_time":"2024-01-26T12:51:37+00:00","article_modified_time":"2024-01-26T12:51:38+00:00","og_image":[{"width":942,"height":587,"url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/01-26-jenkins-rce.jpg","type":"image\/jpeg"}],"author":"redator","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"redator","Est. tempo de leitura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/#article","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/"},"author":{"name":"redator","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6"},"headline":"Vulnerabilidade cr\u00edtica do Jenkins exp\u00f5e servidores a ataques RCE","datePublished":"2024-01-26T12:51:37+00:00","dateModified":"2024-01-26T12:51:38+00:00","mainEntityOfPage":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/"},"wordCount":452,"commentCount":0,"publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"image":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/01-26-jenkins-rce.jpg","keywords":["jenkins","rce"],"articleSection":["Informativo"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/","url":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/","name":"Vulnerabilidade cr\u00edtica do Jenkins exp\u00f5e servidores a ataques RCE - Tech Security","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/#primaryimage"},"image":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/01-26-jenkins-rce.jpg","datePublished":"2024-01-26T12:51:37+00:00","dateModified":"2024-01-26T12:51:38+00:00","breadcrumb":{"@id":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/#primaryimage","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/01-26-jenkins-rce.jpg","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2024\/01\/01-26-jenkins-rce.jpg","width":942,"height":587},{"@type":"BreadcrumbList","@id":"https:\/\/techsecurity.com.br\/2024\/01\/vulnerabilidade-critica-do-jenkins-expoe-servidores-a-ataques-rce\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/techsecurity.com.br\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilidade cr\u00edtica do Jenkins exp\u00f5e servidores a ataques RCE"}]},{"@type":"WebSite","@id":"https:\/\/techsecurity.com.br\/#website","url":"https:\/\/techsecurity.com.br\/","name":"Tech Security","description":"","publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/techsecurity.com.br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/techsecurity.com.br\/#organization","name":"Tech Security","url":"https:\/\/techsecurity.com.br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","width":100,"height":89,"caption":"Tech Security"},"image":{"@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6","name":"redator","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","caption":"redator"},"url":"https:\/\/techsecurity.com.br\/author\/redator\/"}]}},"wps_subtitle":"","_links":{"self":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/770","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/comments?post=770"}],"version-history":[{"count":1,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/770\/revisions"}],"predecessor-version":[{"id":772,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/770\/revisions\/772"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media\/771"}],"wp:attachment":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media?parent=770"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/categories?post=770"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/tags?post=770"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}