Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-2599

Опубликовано: 11 апр. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5.5
CVSS3: 5.4

Описание

Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321).

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

ignored

end of life
precise/esm

DNE

precise was needed
trusty

DNE

trusty/esm

DNE

upstream

released

2.44, 2.32.2
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

Показывать по

EPSS

Процентиль: 38%
0.00164
Низкий

5.5 Medium

CVSS2

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
redhat
около 9 лет назад

Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321).

CVSS3: 5.4
nvd
почти 8 лет назад

Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321).

CVSS3: 5.4
debian
почти 8 лет назад

Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficie ...

CVSS3: 5.4
github
больше 3 лет назад

Incorrect Authorization in Jenkins

EPSS

Процентиль: 38%
0.00164
Низкий

5.5 Medium

CVSS2

5.4 Medium

CVSS3