PT-2017-10937 · Jenkins · Jenkins Favorite Plugin+1

Andres Rodriguez · Publicado 2017-11-01 · Atualizado 2022-05-14 · CVE-2017-1000244

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jenkins Favorite Plugin versions 2.2.0 and older

Description The issue allows for CSRF, resulting in data modification.

Recommendations For Jenkins Favorite Plugin versions 2.2.0 and older, update to a version newer than 2.2.0 to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2017-1000244

GHSA-JQWH-JRPG-5J3H

Produtos afetados

Jenkins

Jenkins Favorite Plugin

Referências · 5

• http://securityfocus.com/bid/101943 · Nota
• https://jenkins.io/security/advisory/2017-06-06 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-jqwh-jrpg-5j3h · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000244 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1000244 · Aviso do Fabricante