CVEvulnerability
CVE-2017-2599
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-04-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- CVSS 3.0 ([email protected])
- 5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-863
Description
Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321).
Affected configurations
• jenkins jenkins (< 2.32.2)
• jenkins jenkins (< 2.44)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- http://www.securityfocus.com/bid/95949 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2599 Issue Tracking, Third Party Advisory
- https://github.com/jenkinsci/jenkins/commit/4ed5c850b6855ab064a66d02fb338f366853ce89 Patch, Third Party Advisory
- https://jenkins.io/security/advisory/2017-02-01/ Vendor Advisory
- http://www.securityfocus.com/bid/95949 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2599 Issue Tracking, Third Party Advisory
- https://github.com/jenkinsci/jenkins/commit/4ed5c850b6855ab064a66d02fb338f366853ce89 Patch, Third Party Advisory
- https://jenkins.io/security/advisory/2017-02-01/ Vendor Advisory