Описание
jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).
Ссылки
- Third Party AdvisoryVDB Entry
- Issue Tracking
- Patch
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- Issue Tracking
- Patch
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
3.1 Low
CVSS3
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
Связанные уязвимости
jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).
jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).
jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blac ...
Incomplete List of Disallowed Inputs in Jenkins
EPSS
3.1 Low
CVSS3
4.3 Medium
CVSS3
4 Medium
CVSS2