Lucene search
PRIOn knowledge basePRION:CVE-2017-1000398HistoryJan 26, 2018 - 2:29 a.m.
Information disclosure
2018-01-2602:29:00
PRIOn knowledge base
www.prio-n.com
4
The remote API in Jenkins 2.73.1 and earlier, 2.83 and earlier at /computer/(agent-name)/api showed information about tasks (typically builds) currently running on that agent. This included information about tasks that the current user otherwise has no access to, e.g. due to lack of Item/Read permission. This has been fixed, and the API now only shows information about accessible tasks.
References
Related
osv
osv
CVE-2017-1000398
2018-01-26 02:29:01
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
2022-05-14 01:04:35
cvelist
cvelist
CVE-2017-1000398
2018-01-26 02:00:00
nvd
nvd
CVE-2017-1000398
2018-01-26 02:29:01
cve
cve
CVE-2017-1000398
2018-01-26 02:29:01
redhatcve
redhatcve
CVE-2017-1000398
2017-11-21 11:22:16
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
2022-05-14 01:04:35
ubuntucve
ubuntucve
CVE-2017-1000398
2018-01-26 00:00:00
nessus
nessus
Jenkins < 2.84 / < 2.73.2 (LTS) Multiple Vulnerabilities
2019-06-05 00:00:00
openvas
openvas
Jenkins Multiple Vulnerabilities (Oct 2017) - Linux
2017-11-07 00:00:00
Jenkins Multiple Vulnerabilities (Oct 2017) - Windows
2017-11-07 00:00:00