3 ms·
Last place I was at had their unmanaged Jenkins servers get compromised and used to run crypto miners.
by VectorLock 7y ago
Last place I was at had their unmanaged Jenkins servers get compromised and used to run crypto miners.
- jennbriden 7y agoWere they using an older version of Jenkins on the public internet? There's been a randomized GUID applied to the initial Jenkins admin password, which you can only access if you have direct access to the Jenkins install. I think this was added in 2016.
- VectorLock 7y agoIt was an older version with a vulnerability but as far as I know not a default password.