CVE-2024-34146

CVE-2024-34146 affects Jenkins Git server Plugin versions 114.v068a_c7cc2574 and earlier, allowing unauthorized read access to Git repositories. The vulnerability stems from a missing permission check for SSH-based Git repository access, enabling attackers with a pre-configured SSH public key, but lacking overall read permissions, to access these repositories. Rated Medium severity with a CVSS score of 6.5, this vulnerability has a network attack vector and low attack complexity (AV:N/AC:L/PR:L). Successful exploitation could lead to high confidentiality impact (C:H) as attackers can read sensitive repository data, but has no integrity or availability impact. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating low public attention.