CVE-2017-2602

Publication date

2018-05-15 21:00:00

Family

redhat

State

PUBLISHED

Description

jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).