Jenkins up to LTS 2.263.1/2.274 Agent config.xml permission

entryeditHistoryDiffjsonxmlCTI

A vulnerability classified as critical was found in Jenkins up to LTS 2.263.1/2.274 (Continuous Integration Software). Affected by this vulnerability is an unknown functionality of the file config.xml of the component Agent Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10826442	01/14/2021	VulD...	price_0day	$0-$5k	see documentation	01/14/2021	accepted	90
10826441	01/14/2021	VulD...	cvss3_meta_tempscore	5.5	see documentation	01/14/2021	accepted	90
10826440	01/14/2021	VulD...	cvss3_meta_basescore	5.5	see documentation	01/14/2021	accepted	90
10826439	01/14/2021	VulD...	cvss3_vuldb_tempscore	5.5		01/14/2021	accepted	90
10826438	01/14/2021	VulD...	cvss3_vuldb_basescore	5.5		01/14/2021	accepted	90
10826437	01/14/2021	VulD...	cvss2_vuldb_tempscore	5.2		01/14/2021	accepted	90
10826436	01/14/2021	VulD...	cvss2_vuldb_basescore	5.2		01/14/2021	accepted	90
10826435	01/14/2021	VulD...	cvss3_vuldb_rc	X	derived from historical data	01/14/2021	accepted	80
10826434	01/14/2021	VulD...	cvss3_vuldb_rl	X	derived from historical data	01/14/2021	accepted	80
10826433	01/14/2021	VulD...	cvss3_vuldb_e	X	derived from historical data	01/14/2021	accepted	80
10826432	01/14/2021	VulD...	cvss3_vuldb_s	U	derived from historical data	01/14/2021	accepted	80
10826431	01/14/2021	VulD...	cvss3_vuldb_pr	L	derived from historical data	01/14/2021	accepted	80
10826430	01/14/2021	VulD...	cvss3_vuldb_av	A	derived from historical data	01/14/2021	accepted	80
10826429	01/14/2021	VulD...	cvss2_vuldb_rc	ND	derived from historical data	01/14/2021	accepted	80
10826428	01/14/2021	VulD...	cvss2_vuldb_rl	ND	derived from historical data	01/14/2021	accepted	80
10826427	01/14/2021	VulD...	cvss2_vuldb_e	ND	derived from historical data	01/14/2021	accepted	80
10826426	01/14/2021	VulD...	cvss2_vuldb_au	S	derived from historical data	01/14/2021	accepted	80
10826425	01/14/2021	VulD...	cvss2_vuldb_av	A	derived from historical data	01/14/2021	accepted	80
10826424	01/14/2021	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	01/14/2021	accepted	80
10826423	01/14/2021	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	01/14/2021	accepted	80