1 line
1.9 KiB
JSON
1 line
1.9 KiB
JSON
{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"moderate"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2017-2611","title":"Title"},{"category":"description","text":"Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes (that are otherwise performed daily), possibly causing additional load on Jenkins master and agents.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2017-2611","url":"https://www.suse.com/security/cve/CVE-2017-2611"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1022042 for CVE-2017-2611","url":"https://bugzilla.suse.com/1022042"}],"title":"SUSE CVE CVE-2017-2611","tracking":{"current_release_date":"2026-11-06T01:16:58Z","generator":{"date":"2026-11-06T01:16:58Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2017-2611","initial_release_date":"2026-11-06T01:16:58Z","revision_history":[{"date":"2026-11-06T01:16:58Z","number":"2","summary":"references added,severity changed from to moderate"}],"status":"interim","version":"2"}}} |