Sinisterly
Exposed open source automation CI & CD server like Jenkins or RunDeck - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Exposed open source automation CI & CD server like Jenkins or RunDeck (/Thread-Exposed-open-source-automation-CI-CD-server-like-Jenkins-or-RunDeck--164963)



Exposed open source automation CI & CD server like Jenkins or RunDeck - Chlsmillar - 07-14-2022

One vulnerable open source CI & CD server leads to major cybersecurity flaws where attackers grasp hundreds of servers in their hands. Here is the article related to Scanning statistics of exposed open source automation server like Jenkins, RunDeck by OSINT threat intel. https://blog.criminalip.io/2022/07/12/open-source-server/

It's hard to belive that there were so many exposed open source server(RunDeck, Jenkins) without any authentication process. It's serious security problem that could access just by open source intelligence. It is time to check the server authentication process once again.
[Image: jenkins_4-1.png?resize=1024%2C708&ssl=1]