Description

Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321).

Remediation

References

CVE-2017-2599

Related Vulnerabilities

WordPress Plugin Scroll Baner Cross-Site Request Forgery (1.0)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.17)

WordPress Plugin WP Review Multiple Unspecified Vulnerabilities (2.0)

WordPress Plugin Remove Yoast SEO comments Unspecified Vulnerability (1.0.4)

Dolibarr Improper Privilege Management Vulnerability (CVE-2022-43138)

Severity

Medium

Classification

CVE-2017-2599 CWE-863 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities