CVE-2016-3725

Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions…

published May 17, 2016

CVSS
—
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02388 · 83.7th percentile
Published
2016-05-17T14:00Z
EPSS history
Timeline
  • 17 MAY 14:00Z
    Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions…
    cvelistv5