En bref
- CVE-2017-1000356 est une vulnérabilité ÉLEVÉE (CVSS 8.8) touchant org.jenkins-ci.main:jenkins-core, jenkins (jenkins).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 7.0%, plus élevée que 94.1% des vulnérabilités.
- Correctif : mettre à jour vers 2.57, 2.46.2 ou plus récent.
Description
Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user database authentication realm: create an account if signup is enabled; or create an account if the victim is an administrator, possibly deleting the existing default admin user in the process and allowing a wide variety of impacts.
NVD description
Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user database authentication realm: create an account if signup is enabled; or create an account if the victim is an administrator, possibly deleting the existing default admin user in the process and allowing a wide variety of impacts.
Autres vulnérabilités de org.jenkins-ci.main:jenkins-core
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free