nanog mailing list archives

Jenkins amplification

From: Töma Gavrichenkov <ximaera () gmail com>
Date: Mon, 3 Feb 2020 18:42:03 +0300

FYI

https://nvd.nist.gov/vuln/detail/CVE-2020-2100
A nice description: https://mobile.twitter.com/Foone/status/1223063275996213248

May you live in interesting times.

Do not postpone a software update if Jenkins is deployed somewhere in
your network.

--
Töma

Current thread:

Jenkins amplification Töma Gavrichenkov (Feb 03)
- Re: Jenkins amplification Harald Koch (Feb 03)
  - Re: Jenkins amplification Christopher Morrow (Feb 03)
    - Re: Jenkins amplification William Herrin (Feb 03)
    - Re: Jenkins amplification Christopher Morrow (Feb 03)
    - Re: Jenkins amplification Christopher Morrow (Feb 03)
    - Re: Jenkins amplification Matt Harris (Feb 03)
    - Re: Jenkins amplification Matt Harris (Feb 03)
    - Re: Jenkins amplification Jean | ddostest.me via NANOG (Feb 03)
    - Re: Jenkins amplification Ryan Hamel (Feb 03)
    - Re: Jenkins amplification Jean | ddostest.me via NANOG (Feb 03)

(Thread continues...)