CVE-2017-2602 | BDVDB-2026-100693 Detail
[UNKNOWN]jenkins
Description#
jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).
Impact#
Per CVSS v3.0: confidentiality impact none, integrity impact low, availability impact none. Attack vector: network.
Weaknesses#
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.