Lucene search

OS Command Injection in Jenkins

🗓️ 14 May 2022 01:30:04Reported by GitHub Advisory DatabaseType

OS Command Injection in Jenkins. Users can run arbitrary shell commands on the master node through a launch method

Reporter	Title	Published	Views	Family All 11
UbuntuCve	CVE-2017-1000393	26 Jan 201800:00	–	ubuntucve
NVD	CVE-2017-1000393	26 Jan 201802:29	–	nvd
CVE	CVE-2017-1000393	26 Jan 201802:29	–	cve
OSV	CVE-2017-1000393	26 Jan 201802:29	–	osv
OSV	OS Command Injection in Jenkins	14 May 202201:04	–	osv
RedhatCVE	CVE-2017-1000393	21 Nov 201711:19	–	redhatcve
Cvelist	CVE-2017-1000393	26 Jan 201802:00	–	cvelist
Prion	Command injection	26 Jan 201802:29	–	prion
Tenable Nessus	Jenkins < 2.84 / < 2.73.2 (LTS) Multiple Vulnerabilities	5 Jun 201900:00	–	nessus
OpenVAS	Jenkins Multiple Vulnerabilities (Oct 2017) - Linux	7 Nov 201700:00	–	openvas

Vulners

Node

org.jenkins-ci.main jenkins-coreRange2.74–2.83

org.jenkins-ci.main jenkins-coreRange≤2.73.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-1000393
jenkins	www.jenkins.io/security/advisory/2017-10-11/
github	www.github.com/jenkinsci/jenkins/commit/67f68c181033cbabf2075769e0f846f58c226c08
github	www.github.com/jenkinsci/jenkins/commit/d7ea3f40efedd50541a57b943d5f7bbed046d091
github	www.github.com/advisories/GHSA-j472-mcq2-95p6

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 May 2022 01:04Current

3.5Low risk

Vulners AI Score3.5

CVSS29

CVSS38.8

EPSS0.001

CWE-78