exploitDog

CVE-2017-16520

Опубликовано: 11 нояб. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.

Ссылки

https://inedo.com/blog/buildmaster-582-released
Vendor Advisory
https://inedo.com/buildmaster/versions#v5.8
Vendor Advisory
https://inedo.myjetbrains.com/youtrack/issue/BM-3107
Vendor Advisory
https://inedo.com/blog/buildmaster-582-released
Vendor Advisory
https://inedo.com/buildmaster/versions#v5.8
Vendor Advisory
https://inedo.myjetbrains.com/youtrack/issue/BM-3107
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:inedo:buildmaster:*:*:*:*:*:*:*:*

Версия до 5.8.2 (исключая)

EPSS

Процентиль: 44%

0.00221

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-269

Связанные уязвимости

GHSA-6wp7-j652-q3wq

CVSS3: 7.5

github

больше 3 лет назад

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.

EPSS

Процентиль: 44%

0.00221

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-269