Improper access control in jobConfigHistory

Jenkins uses the https://github.com/jenkinsci/staplerStapler web framework for HTTP request handling. Stapler's data-binding mechanism instantiates objects by invoking constructors annotated with @DataBoundConstructor, binding submitted data to their arguments, and setting additional properties...

org.jenkins-ci.main:jenkins-test-harness (1.424.2), org.jenkins-ci.main:jenkins-war (1.424.2) +4 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.424.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.2 - org.jenkins-ci.main:jenkins-war 1.424.2 -...