Unauthenticated Jenkin Dashboard

By Anandhu K A Anandhu K A
Published on 01 Oct 2021
Vulnerability

The default configuration of the Jenkins dashboard does not need a user to authenticate to his or her dashboard in order to access the script console. It’s feasible to get a remote shell and run system commands.

Mitigation / Precaution

Do not allow an unauthenticated user access to the script console.

Anandhu K A
Written by
Anandhu K A
Lead Engineer

With a profound understanding of product development, Anandhu plays a pivotal role in crafting cutting-edge solutions that cater to the evolving security needs of digital applications. His expertise, deeply rooted in both engineering and security, makes him an essential component of Beagle Security's mission

Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 14 days
4.8 on G2 • ISO 27001 certified
See How Beagle Security Works
No credit card • No setup required
Launch interactive demo