Unauthenticated access to the jenkins console due to a misconfiguration is a common issue we find that leads to domain compromise, etc. Here's an example of finding the issue via NodeZero + ChatGPT decribing risks/fixes/detection