Description

In Jenkins before versions 2.44, 2.32.2 low privilege users were able to act on administrative monitors due to them not being consistently protected by permission checks (SECURITY-371).

Remediation

References

CVE-2017-2604

Related Vulnerabilities

TYPO3 CVE-2013-7080 Vulnerability (CVE-2013-7080)

Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-12385)

XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2023-29511)

WordPress Plugin Uploadify Remote File Upload (1.0)

WordPress 4.2.x Prototype Pollution (4.2 - 4.2.31)

Severity

Medium

Classification

CVE-2017-2604 CWE-287 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities