Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jenkins Incorrect Authorization Vulnerability - CVE-2017-2599 - Vulnerability Database
Jenkins

Jenkins Incorrect Authorization Vulnerability - CVE-2017-2599

Medium
Reference: CVE-2017-2599
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-2599
Title: Jenkins Incorrect Authorization Vulnerability
Overview:

Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don39t have access to (SECURITY-321).