CVE-2024-43044 is an arbitrary file read vulnerability in Jenkins when accessed through agent connections. This flaw can be exploited to achieve remote code execution. The issue affects the Jenkins component within Red Hat Product OCP Tools 4.14 OpenShift Jenkins. Red Hat has released a security advisory (RHSA-2024:5411) providing an update to remediate this vulnerability. The advisory also references other Jenkins-related fixes but highlights CVE-2024-43044 as critical. No CVSS score is provided in the advisory, but the severity is rated critical by Red Hat Product Security.

Successful exploitation of this vulnerability can allow an attacker to read arbitrary files through Jenkins agent connections, potentially leading to remote code execution. This could compromise the integrity and confidentiality of the affected Jenkins server and its environment, enabling attackers to execute arbitrary commands remotely.

Red Hat has released an official security update for OpenShift Jenkins in Red Hat Product OCP Tools 4.14 to address CVE-2024-43044. Users should apply the update as described in the Red Hat advisory RHSA-2024:5411 and the referenced article https://access.redhat.com/articles/11258. This update mitigates the vulnerability by fixing the arbitrary file read issue and preventing remote code execution. No additional vendor-recommended mitigations are indicated beyond applying the official patch.