Описание
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.
Дополнительная информация
Статус:
Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1335415jenkins: Arbitrary build parameters are passed to build scripts as environment variables (SECURITY-170)
EPSS
Процентиль: 41%
0.00194
Низкий
4 Medium
CVSS2
Связанные уязвимости
CVSS3: 4.3
ubuntu
больше 9 лет назад
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.
CVSS3: 4.3
nvd
больше 9 лет назад
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.
CVSS3: 4.3
debian
больше 9 лет назад
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authentic ...
CVSS3: 6.5
github
больше 3 лет назад
Jenkins allows Remote Users to Inject Build Parameters
EPSS
Процентиль: 41%
0.00194
Низкий
4 Medium
CVSS2