aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +1338 more potentially affected by CVE-2017-1000362 via org.jenkins-ci.main:jenkins-core (>=1.498, <=2.32.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.498, =0.0.1, =1.0.0, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =1.3, =1.0.5.0, =1.0.5.0, =1.0.5.0, =1.7, =1.8 and more Source cves: CVE-2017-1000362 Source advisory: GHSA-92MR-4W2Q-4578...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0.0, <=2.8) +1338 more potentially affected by CVE-2017-1000362 via org.jenkins-ci.main:jenkins-core (>=1.498, <=2.32.1)

org.jenkins-ci.main:jenkins-core MAVEN version =1.498, =0.0.1, =1.0.0, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =1.3, =1.0.5.0, =1.0.5.0, =1.0.5.0, =1.7, =1.8 and more Source cves: CVE-2017-1000362 Source advisory: OSV:GHSA-92MR-4W2Q-4578...

CVE-2017-2605

CVE-2017-2605 is a duplicate of CVE-2017-1000362 concerning Jenkins’ re-key admin monitor. Affected product: Jenkins (CloudBees Jenkins/JENKINS_HOME). Root cause: the re-key admin monitor introduced in Jenkins 1.498 re-encrypts secrets and creates a backup directory with old secrets, which were w...

CVE-2017-1000362

The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINSHOME with a new key. It also created a backup directory with all old secrets, and the key used to encrypt them. These backups were world-readable and not removed afterwards. Jenkins now deletes the...

CVE-2017-1000362

The vulnerability CVE-2017-1000362 affects Jenkins (re-key admin monitor). In Jenkins 1.498, secrets were re-encrypted with a new key and a backup directory at JENKINS_HOME/jenkins.security.RekeySecretAdminMonitor/backups was created containing the old, unremoved secrets; these backups were world...

Jenkins Multiple Vulnerabilities (Feb 2017) - Linux

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...

Jenkins Multiple Vulnerabilities (Feb 2017) - Windows

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...