CVE-2026-84655

概要

参考情報

• jenkins.io/security/advisory/2026-09-02 · Vendor Advisory

jenkins のその他の脆弱性

• CVE-2026-84657中 4.2In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s fla…
• CVE-2026-84656中 4.3A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one …
• CVE-2026-84653低 3.5Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform permission checks in t…
• CVE-2026-84652高 7.3In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated via the "remember me…
• CVE-2026-84651中 6.3In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a subm…