Security Advisory

CVE-2017-1000356

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-01-29 17:00:00

Last updated 2024-08-05 22:00:39

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user database authentication realm: create an account if signup is enabled; or create an account if the victim is an administrator, possibly deleting the existing default admin user in the process and allowing a wide variety of impacts.

← Browse all CVEs View on cve.org ↗