Description

Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321).

Remediation

References

CVE-2017-2599

Related Vulnerabilities

GlassFish CVE-2011-3559 Vulnerability (CVE-2011-3559)

WordPress Plugin Real Media Library:Media Library Folder & File Manager Cross-Site Scripting (4.14.1)

Oracle Application Server Other Vulnerability (CVE-2002-0565)

SharePoint CVE-2021-28450 Vulnerability (CVE-2021-28450)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5296)

Severity

Medium

Classification

CVE-2017-2599 CWE-863 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities