Test ID:	1.3.6.1.4.1.25623.1.0.108096
Category:	Web application abuses
Title:	Jenkins Multiple Vulnerabilities (Feb 2017) - Windows
Summary:	Jenkins is prone to multiple vulnerabilities.
Description:	Summary: Jenkins is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - cross-site scripting vulnerabilities - the usage ouf outdated libraries - insufficient access permission verifications / checks - a remote code execution vulnerability - an information disclosure vulnerability Vulnerability Impact: Successful exploitation will allow remote attackers to obtain sensitive information, to bypass intended access restrictions and execute arbitrary code. Affected Software/OS: Jenkins LTS 2.32.1 and prior, Jenkins main line 2.43 and prior. Solution: Upgrade to Jenkins main line to 2.44 or later / Jenkins LTS to 2.32.2 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4969 BugTraq ID: 58458 http://www.securityfocus.com/bid/58458 http://blog.mindedsecurity.com/2011/07/jquery-is-sink.html http://www.openwall.com/lists/oss-security/2013/01/31/3 https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E http://www.osvdb.org/80056 http://www.securitytracker.com/id/1036620 http://www.ubuntu.com/usn/USN-1722-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-0886 http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151797.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151786.html http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151496.html http://jvn.jp/en/jp/JVN77718330/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2015-000033 https://lists.apache.org/thread.html/rbd23e3ac8113b4da0a025c0e45170b6ec317383a1cf06090c2c717aa@%3Ccommits.cassandra.apache.org%3E https://lists.apache.org/thread.html/re330cfe9e5d84e3f7da8ace23ec32f38cb3fbd328bf177badd7ad942@%3Ccommits.cassandra.apache.org%3E https://lists.apache.org/thread.html/rd5c2256b8dc9935e4bb5e9be90adce58408054bb42523730a40c5548@%3Ccommits.cassandra.apache.org%3E Common Vulnerability Exposure (CVE) ID: CVE-2017-2598 BugTraq ID: 95948 http://www.securityfocus.com/bid/95948 Common Vulnerability Exposure (CVE) ID: CVE-2017-2599 BugTraq ID: 95949 http://www.securityfocus.com/bid/95949 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2599 https://github.com/jenkinsci/jenkins/commit/4ed5c850b6855ab064a66d02fb338f366853ce89 https://jenkins.io/security/advisory/2017-02-01/ Common Vulnerability Exposure (CVE) ID: CVE-2017-2600 BugTraq ID: 95954 http://www.securityfocus.com/bid/95954 Common Vulnerability Exposure (CVE) ID: CVE-2017-2601 BugTraq ID: 95960 http://www.securityfocus.com/bid/95960 http://www.openwall.com/lists/oss-security/2022/04/12/5 http://www.openwall.com/lists/oss-security/2022/05/17/8 http://www.openwall.com/lists/oss-security/2022/06/22/3 http://www.openwall.com/lists/oss-security/2022/06/30/3 http://www.openwall.com/lists/oss-security/2022/10/19/3 Common Vulnerability Exposure (CVE) ID: CVE-2017-2602 BugTraq ID: 95952 http://www.securityfocus.com/bid/95952 Common Vulnerability Exposure (CVE) ID: CVE-2017-2603 BugTraq ID: 95955 http://www.securityfocus.com/bid/95955 Common Vulnerability Exposure (CVE) ID: CVE-2017-2604 BugTraq ID: 95959 http://www.securityfocus.com/bid/95959 Common Vulnerability Exposure (CVE) ID: CVE-2017-2605 Common Vulnerability Exposure (CVE) ID: CVE-2017-2606 BugTraq ID: 95962 http://www.securityfocus.com/bid/95962 Common Vulnerability Exposure (CVE) ID: CVE-2017-2607 BugTraq ID: 95963 http://www.securityfocus.com/bid/95963 Common Vulnerability Exposure (CVE) ID: CVE-2017-2608 BugTraq ID: 95953 http://www.securityfocus.com/bid/95953 Common Vulnerability Exposure (CVE) ID: CVE-2017-2609 BugTraq ID: 95964 http://www.securityfocus.com/bid/95964 Common Vulnerability Exposure (CVE) ID: CVE-2017-2610 BugTraq ID: 95951 http://www.securityfocus.com/bid/95951 Common Vulnerability Exposure (CVE) ID: CVE-2017-2611 BugTraq ID: 95956 http://www.securityfocus.com/bid/95956 Common Vulnerability Exposure (CVE) ID: CVE-2017-2612 BugTraq ID: 95957 http://www.securityfocus.com/bid/95957 Common Vulnerability Exposure (CVE) ID: CVE-2017-2613 BugTraq ID: 95967 http://www.securityfocus.com/bid/95967 Common Vulnerability Exposure (CVE) ID: CVE-2017-1000362
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.