CVE-2017-2599

Опубликовано: 11 апр. 2018

Источник: nvd

CVSS3: 5.4

CVSS2: 5.5

EPSS Низкий

Описание

Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321).

Ссылки

http://www.securityfocus.com/bid/95949
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2599
Issue Tracking
Third Party Advisory
https://github.com/jenkinsci/jenkins/commit/4ed5c850b6855ab064a66d02fb338f366853ce89
Patch
Third Party Advisory
https://jenkins.io/security/advisory/2017-02-01/
Vendor Advisory
http://www.securityfocus.com/bid/95949
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2599
Issue Tracking
Third Party Advisory
https://github.com/jenkinsci/jenkins/commit/4ed5c850b6855ab064a66d02fb338f366853ce89
Patch
Third Party Advisory
https://jenkins.io/security/advisory/2017-02-01/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*

Версия до 2.32.2 (исключая)

cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*

Версия до 2.44 (исключая)

EPSS

Процентиль: 38%

0.00164

Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-863

Связанные уязвимости

CVE-2017-2599

CVSS3: 5.4

ubuntu

почти 8 лет назад

CVE-2017-2599

CVSS3: 5.4

redhat

около 9 лет назад

CVE-2017-2599

CVSS3: 5.4

debian

почти 8 лет назад

Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficie ...

GHSA-7r4h-2h23-6jq9

CVSS3: 5.4

github

больше 3 лет назад

Incorrect Authorization in Jenkins

EPSS

Процентиль: 38%

0.00164

Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-863