CVE-2026-70428

概要

参考情報

• jenkins.io/security/advisory/2026-08-05 · Vendor Advisory

jenkins のその他の脆弱性

• CVE-2026-84657中 4.2In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s fla…
• CVE-2026-84656中 4.3A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one …
• CVE-2026-84655中 4.3Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing objects as JSON and Python through its REST API…
• CVE-2026-84653低 3.5Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform permission checks in t…
• CVE-2026-84652高 7.3In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated via the "remember me…