CVE-2017-1000393

🗓️ 26 Jan 2018 02:00:00Reported by mitreType

CVE-2017-1000393 Jenkins 2.73.1 and earlier, 2.83 and earlier users with permission to create or configure agents in Jenkins could configure a launch method called 'Launch agent via execution of command on master'. This allowed them to run arbitrary shell commands on the master node whenever the agent was supposed to be launched. Configuration of this launch method now requires the Run Scripts permission typically only granted to administrators

Reporter	Title	Published	Views	Family All 14
CNVD	CloudBees Jenkins Arbitrary Command Execution Vulnerability	2 Feb 201800:00	–	cnvd
Cvelist	CVE-2017-1000393	26 Jan 201802:00	–	cvelist
EUVD	EUVD-2022-4271	3 Oct 202520:07	–	euvd
Github Security Blog	OS Command Injection in Jenkins	14 May 202201:04	–	github
Tenable Nessus	Jenkins < 2.84 / < 2.73.2 (LTS) Multiple Vulnerabilities	5 Jun 201900:00	–	nessus
NVD	CVE-2017-1000393	26 Jan 201802:29	–	nvd
OpenVAS	Jenkins Multiple Vulnerabilities (Oct 2017) - Linux	7 Nov 201700:00	–	openvas
OpenVAS	Jenkins Multiple Vulnerabilities (Oct 2017) - Windows	7 Nov 201700:00	–	openvas
OSV	GHSA-J472-MCQ2-95P6 OS Command Injection in Jenkins	14 May 202201:04	–	osv
Prion	Command injection	26 Jan 201802:29	–	prion