In breve
- CVE-2016-3725 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda org.jenkins-ci.main:jenkins-core, jenkins (jenkins), openshift (redhat).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.4%, superiore al 83.9% delle vulnerabilità.
- Correzione: aggiornare a 2.3 o successiva.
Description
Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).
NVD description
Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).
Altre vulnerabilità di org.jenkins-ci.main:jenkins-core
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free