SECURITY-218

Cette mesure d'atténuation est obsolète à partir de Jenkins 2.54 et Jenkins LTS 2.46.2. Si vous avez installé une nouvelle version 2.54+/LTS 2.46.2+ de Jenkins, la CLI basée sur Remoting est désactivée par défaut. Si vous avez installé une version plus ancienne de Jenkins puis mis à niveau vers...

GHSA-R57F-7XW3-Q2R9 Improper Authentication in Jenkins

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to a login command which allowed impersonating any Jenkins user. The login command available in the remoting-based CLI stored the encrypted user name of the successfully authenticated user in a cache file used to...

CVE-2017-1000354

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to a login command which allowed impersonating any Jenkins user. The login command available in the remoting-based CLI stored the encrypted user name of the successfully authenticated user in a cache file used to...