Auth bypass in Jenkins Periodic Backup
CVE-2017-1000086
The Periodic Backup Plugin did not perform any permission checks, allowing any user with Overall/Read access to change its settings, trigger backups, restore backups, download backups, and also delete all previous backups via log rotation. Additionally, the plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Request Forgery attacks.
Vulnerability class: Broken Access Control
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.011 (63.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 64th percentile — 63.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: 0.000
Affected products
- Jenkins Periodic Backup — versions 1.0, 1.1, 1.2
Weakness classification (CWE)
References
- www.securityfocus.com/bid/100437 (VDB Entry, Third Party Advisory, vdb-entry)
- jenkins.io/security/advisory/2017-07-10/ (Vendor Advisory)
Frequently asked questions
- What is CVE-2017-1000086?
- CVE-2017-1000086 is a high-severity vulnerability in Jenkins Periodic Backup, classified under Missing Authorization. CVSS score: 8.0/10. Published 2017-10-05.
- How severe is CVE-2017-1000086?
- High severity. CVSS v3 base score is 8.0 out of 10.