En resumen
- CVE-2016-3725 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a org.jenkins-ci.main:jenkins-core, jenkins (jenkins), openshift (redhat).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.4%, mayor que el 83.9% de las vulnerabilidades.
- Solución: actualizar a 2.3 o posterior.
Description
Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).
NVD description
Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).
Más vulnerabilidades de org.jenkins-ci.main:jenkins-core
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free