CVE-2017-1000356 | BDVDB-2026-95847 Detail

Description#

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user database authentication realm: create an account if signup is enabled; or create an account if the victim is an administrator, possibly deleting the existing default admin user in the process and allowing a wide variety of impacts.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/98062
https://jenkins.io/security/advisory/2017-04-26/

Exploit#

No public exploit known

History#

Version 12018-01-29Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.