CVE-2017-2652CWE-862

CVE-2017-2652: fallo en Jenkins project DistFork Jenkins plugin

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear DistFork Jenkins plugin+ Monitorear org.jenkins-ci.plugins:distfork

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 1.4%
It was found that there were no permission checks performed in the Distributed Fork plugin before and including 1.5.0 for Jenkins that provides the dist-fork CLI command beyond the basic check for Overall/Read permission, allowing anyone with that permission to run arbitrary shell commands on all connected nodes.
Productos afectados
Jenkins project · DistFork Jenkins plugin