← voltar
CVE-2017-2599

CVE-2017-2599

CVSS 5.4 MEDIUMEPSS 1.1%CWE-863
Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321).
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
[UNKNOWN] · jenkins

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2599https://github.com/jenkinsci/jenkins/commit/4ed5c850b6855ab064a66d02fb338f366853ce89https://jenkins.io/security/advisory/2017-02-01/http://www.securityfocus.com/bid/95949