Description

jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).

Remediation

References

CVE-2017-2602

Related Vulnerabilities

PostgreSQL CVE-2023-2454 Vulnerability (CVE-2023-2454)

WordPress Plugin Parsian Bank Woocommerce Cross-Site Scripting (1.0)

WordPress Plugin Edit Comments XT Cross-Site Scripting (1.0)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5326)

MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2006-0369)

Severity

Medium

Classification

CVE-2017-2602 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities