writeups.xyz / My Research on Misconfigured Jenkins Servers

Submitter : c2a

Date: 18 January 2018

Bounty : undisclosed

Vulnerabilities :

• Information Disclosure
• Missing Authentication
• Exposed Jenkins Instance

Programs :

• Google
• Tesco
• Pearson
• News Uk

Authors :

• Mikail Tunç (@Emtunc)

Link :
https://emtunc.org/blog/01/2018/research-misconfigured-jenkins-servers/