Non évaluée
In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configurati...
CVE-2017-2600
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes (SECURITY-343).
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory securityfocus.com
- advisory jenkins.io
- patch bugzilla.redhat.com
- patch github.com