Description

In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes (SECURITY-343).

Remediation

References

CVE-2017-2600

Related Vulnerabilities

Squid Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-18678)

Joomla! Core 2.5.x Remote File Inclusion (2.5.4 - 2.5.25)

WebLogic CVE-2019-2398 Vulnerability (CVE-2019-2398)

WordPress Plugin WordPress Colorbox Lightbox Cross-Site Scripting (1.1.2)

Collabtive Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-6872)

Severity

Medium

Classification

CVE-2017-2600 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities