{"id":1289340,"date":"2024-08-21T01:10:08","date_gmt":"2024-08-21T03:10:08","guid":{"rendered":"https:\/\/teknomers.com\/fr\/la-cisa-met-en-garde-contre-une-vulnerabilite-critique-de-jenkins-exploitee-dans-des-attaques-de-ransomware\/"},"modified":"2024-08-21T01:10:12","modified_gmt":"2024-08-21T03:10:12","slug":"la-cisa-met-en-garde-contre-une-vulnerabilite-critique-de-jenkins-exploitee-dans-des-attaques-de-ransomware","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/la-cisa-met-en-garde-contre-une-vulnerabilite-critique-de-jenkins-exploitee-dans-des-attaques-de-ransomware\/","title":{"rendered":"La CISA met en garde contre une vuln\u00e9rabilit\u00e9 critique de Jenkins exploit\u00e9e dans des attaques de ransomware"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">20 ao\u00fbt 2024<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><span class=\"p-tags\">Vuln\u00e9rabilit\u00e9 \/ Ransomware<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a rel=\"nofollow\" href=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2024\/08\/La-CISA-met-en-garde-contre-une-vulnerabilite-critique-de.png\" style=\"clear: left; display: block; float: left; text-align: center;\"><\/a><\/div>\n<p>L&#8217;Agence am\u00e9ricaine de cybers\u00e9curit\u00e9 et de s\u00e9curit\u00e9 des infrastructures (CISA) a <a rel=\"nofollow noopener\" href=\"https:\/\/www.cisa.gov\/news-events\/alerts\/2024\/08\/19\/cisa-adds-one-known-exploited-vulnerability-catalog\" target=\"_blank\">ajout\u00e9<\/a> une faille de s\u00e9curit\u00e9 critique affectant Jenkins sur ses vuln\u00e9rabilit\u00e9s connues exploit\u00e9es (<a rel=\"nofollow noopener\" href=\"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog\" target=\"_blank\">KEV<\/a>) catalogue, suite \u00e0 son exploitation dans des attaques de ransomware.<\/p>\n<p>La vuln\u00e9rabilit\u00e9, suivie comme <a rel=\"nofollow noopener\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-23897\" target=\"_blank\">CVE-2024-23897<\/a> (score CVSS\u00a0: 9,8), est une faille de parcours de chemin qui pourrait conduire \u00e0 l&#8217;ex\u00e9cution de code.<\/p>\n<p>\u00ab L&#8217;interface de ligne de commande (CLI) de Jenkins contient une vuln\u00e9rabilit\u00e9 de travers\u00e9e de chemin qui permet aux attaquants un acc\u00e8s en lecture limit\u00e9 \u00e0 certains fichiers, ce qui peut conduire \u00e0 l&#8217;ex\u00e9cution de code \u00bb, a d\u00e9clar\u00e9 la CISA dans un communiqu\u00e9.<\/p>\n<div class=\"dog_two clear\"><center class=\"cf\"><a rel=\"nofollow noopener\" href=\"https:\/\/thehackernews.uk\/inside-a-d\" target=\"_blank\" title=\"Cybersecurity\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybers\u00e9curit\u00e9\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2024\/08\/Le-ministere-de-la-Justice-accuse-un-homme-de-Nashville.jpg\" width=\"727\" height=\"90\"\/><\/a><\/center><\/div>\n<p>Il a \u00e9t\u00e9 r\u00e9v\u00e9l\u00e9 pour la premi\u00e8re fois par les chercheurs en s\u00e9curit\u00e9 de Sonar en janvier 2024 et r\u00e9solu dans les versions 2.442 et LTS 2.426.3 de Jenkins en d\u00e9sactivant la fonction d&#8217;analyseur de commandes.<\/p>\n<p>En mars dernier, Trend Micro <a rel=\"nofollow noopener\" href=\"https:\/\/www.trendmicro.com\/en_us\/research\/24\/c\/cve-2024-23897.html\" target=\"_blank\">dit<\/a> il a d\u00e9couvert plusieurs cas d&#8217;attaque provenant des Pays-Bas, de Singapour et d&#8217;Allemagne, et a trouv\u00e9 des cas o\u00f9 des exploits d&#8217;ex\u00e9cution de code \u00e0 distance pour la faille \u00e9taient activement \u00e9chang\u00e9s.<\/p>\n<div class=\"separator\" style=\"clear: both;\"><a rel=\"nofollow\" href=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2024\/08\/La-CISA-met-en-garde-contre-une-vulnerabilite-critique-de.jpg\" style=\"clear: left; display: block; float: left; text-align: center;\"><img decoding=\"async\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2024\/08\/La-CISA-met-en-garde-contre-une-vulnerabilite-critique-de.jpg\" alt=\"Attaques de ransomware de vuln\u00e9rabilit\u00e9 Jenkins\" border=\"0\" data-original-height=\"304\" data-original-width=\"828\" title=\"Attaques de ransomware de vuln\u00e9rabilit\u00e9 Jenkins\"\/><\/a><\/div>\n<p>Ces derni\u00e8res semaines, <a rel=\"nofollow noopener\" href=\"https:\/\/www.cloudsek.com\/blog\/born-group-supply-chain-breach-in-depth-analysis-of-intelbrokers-jenkins-exploitation\" target=\"_blank\">CloudSEK<\/a> et <a rel=\"nofollow noopener\" href=\"https:\/\/blogs.juniper.net\/en-us\/threat-research\/cve-2024-23897-enabled-ransomware-attack-on-indian-banks\" target=\"_blank\">R\u00e9seaux Juniper<\/a> ont r\u00e9v\u00e9l\u00e9 une s\u00e9rie de cyberattaques exploitant le CVE-2024-23897 dans la nature pour infiltrer les soci\u00e9t\u00e9s BORN Group et <a rel=\"nofollow noopener\" href=\"https:\/\/www.cloudsek.com\/blog\/major-payment-disruption-ransomware-strikes-indian-banking-infrastructure\" target=\"_blank\">Solutions technologiques Brontoo<\/a>.<\/p>\n<p>Les attaques ont \u00e9t\u00e9 attribu\u00e9es respectivement \u00e0 un acteur malveillant connu sous le nom d&#8217;IntelBroker et au gang de ransomware RansomExx.<\/p>\n<section class=\"dog_two clear\"><center class=\"cf\"><a rel=\"nofollow noopener\" href=\"https:\/\/thehackernews.uk\/cis-image-hn\" target=\"_blank\" title=\"Cybersecurity\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybers\u00e9curit\u00e9\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2024\/08\/1723195626_70_Le-ministere-de-la-Justice-accuse-un-homme-de-Nashville.png\" width=\"727\" height=\"90\"\/><\/a><\/center><\/section>\n<p>\u00ab CVE-2024-23897 est une vuln\u00e9rabilit\u00e9 LFI non authentifi\u00e9e qui permet aux attaquants de lire des fichiers arbitraires sur le serveur Jenkins \u00bb, CloudSEK <a rel=\"nofollow noopener\" href=\"https:\/\/www.cloudsek.com\/blog\/xposing-the-exploitation-how-cve-2024-23897-led-to-the-compromise-of-github-repos-via-jenkins-lfi-vulnerability\" target=\"_blank\">dit<\/a>\u00ab Cette vuln\u00e9rabilit\u00e9 r\u00e9sulte d&#8217;une validation d&#8217;entr\u00e9e incorrecte, permettant aux attaquants de manipuler des param\u00e8tres sp\u00e9cifiques et de tromper le serveur pour acc\u00e9der et afficher le contenu de fichiers sensibles. \u00bb<\/p>\n<div class=\"separator\" style=\"clear: both;\"><a rel=\"nofollow\" href=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2024\/08\/1724209807_689_La-CISA-met-en-garde-contre-une-vulnerabilite-critique-de.png\" style=\"clear: left; display: block; float: left; text-align: center;\"><img decoding=\"async\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2024\/08\/1724209807_689_La-CISA-met-en-garde-contre-une-vulnerabilite-critique-de.png\" alt=\"Attaques de ransomware de vuln\u00e9rabilit\u00e9 Jenkins\" border=\"0\" data-original-height=\"1252\" data-original-width=\"1580\" title=\"Attaques de ransomware de vuln\u00e9rabilit\u00e9 Jenkins\"\/><\/a><\/div>\n<p>Compte tenu de l&#8217;exploitation active de la vuln\u00e9rabilit\u00e9, les agences du Federal Civilian Executive Branch (FCEB) ont jusqu&#8217;au 9 septembre 2024 pour appliquer les correctifs et s\u00e9curiser leurs r\u00e9seaux contre les menaces actives.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Vous avez trouv\u00e9 cet article int\u00e9ressant ? Suivez-nous sur <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/thehackersnews\" target=\"_blank\">Gazouillement <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>  et <a rel=\"nofollow noopener\" href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" target=\"_blank\">LinkedIn<\/a> pour lire davantage de contenu exclusif que nous publions.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2024\/08\/cisa-warns-of-critical-jenkins.html\" rel=\"nofollow noopener\" target=\"_blank\">ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue80220 ao\u00fbt 2024\ue804Ravie LakshmananVuln\u00e9rabilit\u00e9 \/ Ransomware L&#8217;Agence am\u00e9ricaine de cybers\u00e9curit\u00e9 et de s\u00e9curit\u00e9 des infrastructures (CISA) a ajout\u00e9 une faille de s\u00e9curit\u00e9 critique affectant Jenkins sur ses vuln\u00e9rabilit\u00e9s connues exploit\u00e9es (KEV) catalogue, suite \u00e0 son exploitation dans des attaques de ransomware. La vuln\u00e9rabilit\u00e9, suivie comme CVE-2024-23897 (score CVSS\u00a0: 9,8), est une faille de parcours de [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1289341,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[238714,200292,238582,240744,238778,8074,4805,4168,841,22,6124,429,133,36372,525,113393,238584,200271,4955,238334,98340,4392,238617,246491,4172,196,4166,3667,238583],"class_list":["post-1289340","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-actualites-des-hackers","tag-actualites-sur-la-cybersecurite","tag-actualites-sur-la-cybersecurite-aujourdhui","tag-actualites-sur-le-cyberespace","tag-actualites-sur-le-piratage-informatique","tag-attaques","tag-cisa","tag-comment-pirater","tag-contre","tag-critique","tag-cyberattaques","tag-dans","tag-des","tag-exploitee","tag-garde","tag-jenkins","tag-les-nouvelles-des-hackers","tag-logiciel-malveillant-rancongiciel","tag-met","tag-mises-a-jour-cybernetiques","tag-mises-a-jour-de-cybersecurite","tag-ransomware","tag-securite-de-linformation","tag-securite-du-reseau","tag-securite-informatique","tag-une","tag-violation-de-donnees","tag-vulnerabilite","tag-vulnerabilite-du-logiciel"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1289340","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=1289340"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1289340\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/1289341"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=1289340"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=1289340"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=1289340"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}