Description

jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).

Remediation

References

CVE-2017-2602

Related Vulnerabilities

Drupal Core 8.5.x Multiple Vulnerabilities (8.5.0 - 8.5.7)

Jenkins CVE-2023-43494 Vulnerability (CVE-2023-43494)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10402)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4549)

FluxBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-43677)

Severity

Medium

Classification

CVE-2017-2602 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities