Security Advisory

CVE-2017-2613

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-05-15 22:00:00

Last updated 2024-08-05 14:02:07

Assigner redhat

CVSS score 5.4

State PUBLISHED

Description

jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records (SECURITY-406).

← Browse all CVEs View on cve.org ↗