Auth bypass in Jenkins
CVE-2017-2611
Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes (that are otherwise performed daily), possibly causing additional load on Jenkins master and agents.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.
EPSS exploit prediction
EPSS: 0.020 (79.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 80th percentile — 79.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.020 · newest: 0.020 · change: -0.001
Affected products
- Jenkins
- Unspecified Jenkins — versions jenkins 2.32.2, jenkins 2.44
- Red Hat Openshift — versions 2.0, 3.0
Weakness classification (CWE)
References
- jenkins.io/security/advisory/2017-02-01/ (Vendor Advisory)
- www.securityfocus.com/bid/95956 (VDB Entry, Third Party Advisory, vdb-entry)
- bugzilla.redhat.com/show_bug.cgi (Third Party Advisory, Issue Tracking)
- github.com/jenkinsci/jenkins/commit/97a61a9fe55f4c16168c123f98301a5173b9fa86 (Third Party Advisory)
Frequently asked questions
- What is CVE-2017-2611?
- CVE-2017-2611 is a medium-severity vulnerability in Jenkins, classified under CWE-358. CVSS score: 4.3/10. Published 2018-05-08.
- How severe is CVE-2017-2611?
- Medium severity. CVSS v3 base score is 4.3 out of 10.