Vulnerable Jenkins plugins

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_10
Category	System Configuration
Severity	MEDIUM

Impact

Jenkins plugins running on the Jenkins master node possess known vulnerabilities that can be exploited by an adversary with access to Jenkins.

Recommended Solution - Buildtime

• Update the vulnerable plugins to the latest version

• If the latest version does not have a fix, consider removing the plugin from Jenkins