SECURITY-218

Questa mitigazione è obsoleta a partire da Jenkins 2.54 e Jenkins LTS 2.46.2. Se hai installato una versione 2.54+/LTS 2.46.2+ di Jenkins, la CLI basata su Remoting è disabilitata per impostazione predefinita. Se hai installato una versione precedente di Jenkins e hai effettuato l'aggiornamento a...

GHSA-R57F-7XW3-Q2R9 Improper Authentication in Jenkins

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to a login command which allowed impersonating any Jenkins user. The login command available in the remoting-based CLI stored the encrypted user name of the successfully authenticated user in a cache file used to...

CVE-2017-1000354

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to a login command which allowed impersonating any Jenkins user. The login command available in the remoting-based CLI stored the encrypted user name of the successfully authenticated user in a cache file used to...