tree 9781763fb0ffd2f302285f53fd30e708a9ff8214
parent ba36a085ae4dc0f73e084433b83876969558f941
author Luca Milanesio <luca.milanesio@gmail.com> 1706559963 +0000
committer Luca Milanesio <luca.milanesio@gmail.com> 1706564597 +0000

Add workaround for mitigating CVE-2024-23897

The CVE-2024-23897 allows any anonymous user to access
any files on the filesystem by exploiting the ability
of args4j to access files content as parameters.

Until Jenkins gets upgraded to at least 2.442, LTS 2.426.3
make sure that the CLI is fully disabled, using the workaround
suggested at [1].

[1] https://www.jenkins.io/security/advisory/2024-01-24/

Bug: Issue 322839800
Change-Id: I1bd6d8c2506ff0cc9cf40b76f2306b080d0a7ef8