jenkinsci/jenkins · Security
Improper Authentication in Jenkins
- GHSA ID
- GHSA-m93h-5qmx-pphg
- CVE ID
- CVE-2017-2604
- Severity
- medium
- Published
- Updated
- CVSS
- 4.3 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS v3
- 4.3 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
In Jenkins before versions 2.44 and 2.32.2, low privilege users were able to act on administrative monitors due to them not being consistently protected by permission checks (SECURITY-371).
CWEs
- CWE-287 · Improper Authentication