Description

In Jenkins before versions 2.44, 2.32.2 low privilege users were able to act on administrative monitors due to them not being consistently protected by permission checks (SECURITY-371).

Remediation

References

CVE-2017-2604

Related Vulnerabilities

ownCloud CVE-2013-7344 Vulnerability (CVE-2013-7344)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-7491)

PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5712)

WordPress Plugin Contact Form Builder-a plugin for creating contact and feedback forms Multiple SQL Injection Vulnerabilities (1.0.24)

Apache Tomcat Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-12615)

Severity

Medium

Classification

CVE-2017-2604 CWE-287 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities