4 ms·

Why was Jenkins running on a production server?

• deepwell 8y ago
  it was not, read again
  • Perceptes 8y ago
    But it does seem to be the case that the same SSH key pair that was used to access Jenkins also provided access to the production infrastructure. Unless I'm misunderstanding the nature of the attack.
    • zigara 8y ago
      It seems the issue was developers using SSH agent forwarding which was abused to access the production environment.