CVE-2017-1000356

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user database authentication realm: create an…

published January 29, 2018

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user database authentication realm: create an account if signup is enabled; or create an account if the victim is an administrator, possibly deleting the existing default admin user in the process and allowing a wide variety of impacts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06957 · 94.1th percentile
Published
2018-01-29T17:00Z
EPSS history
Timeline
  • 29 JAN 17:00Z
    Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user database authentication realm: create an…
    cvelistv5