Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-1000067

Опубликовано: 16 фев. 2018
Источник: debian

Описание

An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
jenkinsremovedpackage

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 8 лет назад

An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.

CVSS3: 6.4
redhat
больше 8 лет назад

An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.

CVSS3: 5.3
nvd
больше 8 лет назад

An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.

CVSS3: 5.3
github
больше 4 лет назад

Server-Side Request Forgery in Jenkins