CVE-2017-2598
CVSS4.0
发布时间 :2018-05-23 09:29:00
修订时间 :2018-06-26 14:15:09
NMS    

[原文]Jenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secrets vulnerable to unnecessary risks (SECURITY-304).


[CNNVD]CNNVD数据暂缺。


[机译]译文暂缺.

- CVSS (基础分值)

CVSS分值: 4 [中等(MEDIUM)]
机密性影响: PARTIAL [很可能造成信息泄露]
完整性影响: NONE [不会对系统完整性产生影响]
可用性影响: NONE [对系统可用性无影响]
攻击复杂度: LOW [漏洞利用没有访问限制 ]
攻击向量: NETWORK [攻击者不需要获取内网访问权或本地访问权]
身份认证: SINGLE_INSTANCE [--]

- CWE (弱点类目)

CWE-326 [不充分的加密强度]

- CPE (受影响的平台与产品)

cpe:/a:jenkins:jenkins:1.0.10
cpe:/a:jenkins:jenkins:1.0.11
cpe:/a:jenkins:jenkins:1.0.12
cpe:/a:jenkins:jenkins:1.0.13
cpe:/a:jenkins:jenkins:1.0.14
cpe:/a:jenkins:jenkins:1.0.15
cpe:/a:jenkins:jenkins:1.0.16
cpe:/a:jenkins:jenkins:1.17
cpe:/a:jenkins:jenkins:1.18
cpe:/a:jenkins:jenkins:1.19
cpe:/a:jenkins:jenkins:1.20
cpe:/a:jenkins:jenkins:1.21
cpe:/a:jenkins:jenkins:1.22
cpe:/a:jenkins:jenkins:1.23
cpe:/a:jenkins:jenkins:1.24
cpe:/a:jenkins:jenkins:1.25
cpe:/a:jenkins:jenkins:1.26
cpe:/a:jenkins:jenkins:1.27
cpe:/a:jenkins:jenkins:1.28
cpe:/a:jenkins:jenkins:1.29
cpe:/a:jenkins:jenkins:1.30
cpe:/a:jenkins:jenkins:1.31
cpe:/a:jenkins:jenkins:1.32
cpe:/a:jenkins:jenkins:1.33
cpe:/a:jenkins:jenkins:1.34
cpe:/a:jenkins:jenkins:1.35
cpe:/a:jenkins:jenkins:1.36
cpe:/a:jenkins:jenkins:1.37
cpe:/a:jenkins:jenkins:1.38
cpe:/a:jenkins:jenkins:1.39
cpe:/a:jenkins:jenkins:1.40
cpe:/a:jenkins:jenkins:1.41
cpe:/a:jenkins:jenkins:1.42
cpe:/a:jenkins:jenkins:1.43
cpe:/a:jenkins:jenkins:1.44
cpe:/a:jenkins:jenkins:1.45
cpe:/a:jenkins:jenkins:1.46
cpe:/a:jenkins:jenkins:1.47
cpe:/a:jenkins:jenkins:1.48
cpe:/a:jenkins:jenkins:1.49
cpe:/a:jenkins:jenkins:1.50
cpe:/a:jenkins:jenkins:1.51
cpe:/a:jenkins:jenkins:1.52
cpe:/a:jenkins:jenkins:1.53
cpe:/a:jenkins:jenkins:1.54
cpe:/a:jenkins:jenkins:1.55
cpe:/a:jenkins:jenkins:1.56
cpe:/a:jenkins:jenkins:1.57
cpe:/a:jenkins:jenkins:1.58
cpe:/a:jenkins:jenkins:1.59
cpe:/a:jenkins:jenkins:1.60
cpe:/a:jenkins:jenkins:1.61
cpe:/a:jenkins:jenkins:1.62
cpe:/a:jenkins:jenkins:1.63
cpe:/a:jenkins:jenkins:1.64
cpe:/a:jenkins:jenkins:1.65
cpe:/a:jenkins:jenkins:1.66
cpe:/a:jenkins:jenkins:1.67
cpe:/a:jenkins:jenkins:1.68
cpe:/a:jenkins:jenkins:1.69
cpe:/a:jenkins:jenkins:1.70
cpe:/a:jenkins:jenkins:1.71
cpe:/a:jenkins:jenkins:1.72
cpe:/a:jenkins:jenkins:1.73
cpe:/a:jenkins:jenkins:1.74
cpe:/a:jenkins:jenkins:1.75
cpe:/a:jenkins:jenkins:1.76
cpe:/a:jenkins:jenkins:1.77
cpe:/a:jenkins:jenkins:1.78
cpe:/a:jenkins:jenkins:1.79
cpe:/a:jenkins:jenkins:1.80
cpe:/a:jenkins:jenkins:1.81
cpe:/a:jenkins:jenkins:1.82
cpe:/a:jenkins:jenkins:1.83
cpe:/a:jenkins:jenkins:1.84
cpe:/a:jenkins:jenkins:1.85
cpe:/a:jenkins:jenkins:1.86
cpe:/a:jenkins:jenkins:1.87
cpe:/a:jenkins:jenkins:1.88
cpe:/a:jenkins:jenkins:1.89
cpe:/a:jenkins:jenkins:1.90
cpe:/a:jenkins:jenkins:1.91
cpe:/a:jenkins:jenkins:1.92
cpe:/a:jenkins:jenkins:1.93
cpe:/a:jenkins:jenkins:1.94
cpe:/a:jenkins:jenkins:1.95
cpe:/a:jenkins:jenkins:1.96
cpe:/a:jenkins:jenkins:1.97
cpe:/a:jenkins:jenkins:1.98
cpe:/a:jenkins:jenkins:1.99
cpe:/a:jenkins:jenkins:1.100
cpe:/a:jenkins:jenkins:1.101
cpe:/a:jenkins:jenkins:1.102
cpe:/a:jenkins:jenkins:1.103
cpe:/a:jenkins:jenkins:1.104
cpe:/a:jenkins:jenkins:1.105
cpe:/a:jenkins:jenkins:1.106
cpe:/a:jenkins:jenkins:1.107
cpe:/a:jenkins:jenkins:1.108
cpe:/a:jenkins:jenkins:1.109
cpe:/a:jenkins:jenkins:1.110
cpe:/a:jenkins:jenkins:1.111
cpe:/a:jenkins:jenkins:1.112
cpe:/a:jenkins:jenkins:1.113
cpe:/a:jenkins:jenkins:1.114
cpe:/a:jenkins:jenkins:1.115
cpe:/a:jenkins:jenkins:1.116
cpe:/a:jenkins:jenkins:1.117
cpe:/a:jenkins:jenkins:1.118
cpe:/a:jenkins:jenkins:1.119
cpe:/a:jenkins:jenkins:1.120
cpe:/a:jenkins:jenkins:1.121
cpe:/a:jenkins:jenkins:1.122
cpe:/a:jenkins:jenkins:1.123
cpe:/a:jenkins:jenkins:1.124
cpe:/a:jenkins:jenkins:1.125
cpe:/a:jenkins:jenkins:1.126
cpe:/a:jenkins:jenkins:1.127
cpe:/a:jenkins:jenkins:1.128
cpe:/a:jenkins:jenkins:1.129
cpe:/a:jenkins:jenkins:1.130
cpe:/a:jenkins:jenkins:1.131
cpe:/a:jenkins:jenkins:1.132
cpe:/a:jenkins:jenkins:1.133
cpe:/a:jenkins:jenkins:1.134
cpe:/a:jenkins:jenkins:1.135
cpe:/a:jenkins:jenkins:1.136
cpe:/a:jenkins:jenkins:1.137
cpe:/a:jenkins:jenkins:1.138
cpe:/a:jenkins:jenkins:1.139
cpe:/a:jenkins:jenkins:1.140
cpe:/a:jenkins:jenkins:1.141
cpe:/a:jenkins:jenkins:1.142
cpe:/a:jenkins:jenkins:1.143
cpe:/a:jenkins:jenkins:1.144
cpe:/a:jenkins:jenkins:1.145
cpe:/a:jenkins:jenkins:1.146
cpe:/a:jenkins:jenkins:1.147
cpe:/a:jenkins:jenkins:1.148
cpe:/a:jenkins:jenkins:1.149
cpe:/a:jenkins:jenkins:1.150
cpe:/a:jenkins:jenkins:1.151
cpe:/a:jenkins:jenkins:1.152
cpe:/a:jenkins:jenkins:1.153
cpe:/a:jenkins:jenkins:1.154
cpe:/a:jenkins:jenkins:1.155
cpe:/a:jenkins:jenkins:1.156
cpe:/a:jenkins:jenkins:1.157
cpe:/a:jenkins:jenkins:1.158
cpe:/a:jenkins:jenkins:1.159
cpe:/a:jenkins:jenkins:1.160
cpe:/a:jenkins:jenkins:1.161
cpe:/a:jenkins:jenkins:1.162
cpe:/a:jenkins:jenkins:1.163
cpe:/a:jenkins:jenkins:1.164
cpe:/a:jenkins:jenkins:1.165
cpe:/a:jenkins:jenkins:1.166
cpe:/a:jenkins:jenkins:1.167
cpe:/a:jenkins:jenkins:1.168
cpe:/a:jenkins:jenkins:1.169
cpe:/a:jenkins:jenkins:1.170
cpe:/a:jenkins:jenkins:1.171
cpe:/a:jenkins:jenkins:1.172
cpe:/a:jenkins:jenkins:1.173
cpe:/a:jenkins:jenkins:1.174
cpe:/a:jenkins:jenkins:1.175
cpe:/a:jenkins:jenkins:1.176
cpe:/a:jenkins:jenkins:1.177
cpe:/a:jenkins:jenkins:1.178
cpe:/a:jenkins:jenkins:1.179
cpe:/a:jenkins:jenkins:1.180
cpe:/a:jenkins:jenkins:1.181
cpe:/a:jenkins:jenkins:1.182
cpe:/a:jenkins:jenkins:1.183
cpe:/a:jenkins:jenkins:1.184
cpe:/a:jenkins:jenkins:1.185
cpe:/a:jenkins:jenkins:1.186
cpe:/a:jenkins:jenkins:1.187
cpe:/a:jenkins:jenkins:1.188
cpe:/a:jenkins:jenkins:1.189
cpe:/a:jenkins:jenkins:1.190
cpe:/a:jenkins:jenkins:1.191
cpe:/a:jenkins:jenkins:1.192
cpe:/a:jenkins:jenkins:1.193
cpe:/a:jenkins:jenkins:1.194
cpe:/a:jenkins:jenkins:1.195
cpe:/a:jenkins:jenkins:1.196
cpe:/a:jenkins:jenkins:1.197
cpe:/a:jenkins:jenkins:1.198
cpe:/a:jenkins:jenkins:1.199
cpe:/a:jenkins:jenkins:1.200
cpe:/a:jenkins:jenkins:1.201
cpe:/a:jenkins:jenkins:1.202
cpe:/a:jenkins:jenkins:1.203
cpe:/a:jenkins:jenkins:1.204
cpe:/a:jenkins:jenkins:1.205
cpe:/a:jenkins:jenkins:1.206
cpe:/a:jenkins:jenkins:1.207
cpe:/a:jenkins:jenkins:1.208
cpe:/a:jenkins:jenkins:1.209
cpe:/a:jenkins:jenkins:1.210
cpe:/a:jenkins:jenkins:1.211
cpe:/a:jenkins:jenkins:1.212
cpe:/a:jenkins:jenkins:1.213
cpe:/a:jenkins:jenkins:1.214
cpe:/a:jenkins:jenkins:1.215
cpe:/a:jenkins:jenkins:1.216
cpe:/a:jenkins:jenkins:1.217
cpe:/a:jenkins:jenkins:1.218
cpe:/a:jenkins:jenkins:1.219
cpe:/a:jenkins:jenkins:1.220
cpe:/a:jenkins:jenkins:1.221
cpe:/a:jenkins:jenkins:1.222
cpe:/a:jenkins:jenkins:1.223
cpe:/a:jenkins:jenkins:1.224
cpe:/a:jenkins:jenkins:1.225
cpe:/a:jenkins:jenkins:1.226
cpe:/a:jenkins:jenkins:1.227
cpe:/a:jenkins:jenkins:1.228
cpe:/a:jenkins:jenkins:1.229
cpe:/a:jenkins:jenkins:1.230
cpe:/a:jenkins:jenkins:1.231
cpe:/a:jenkins:jenkins:1.232
cpe:/a:jenkins:jenkins:1.233
cpe:/a:jenkins:jenkins:1.234
cpe:/a:jenkins:jenkins:1.235
cpe:/a:jenkins:jenkins:1.236
cpe:/a:jenkins:jenkins:1.237
cpe:/a:jenkins:jenkins:1.238
cpe:/a:jenkins:jenkins:1.239
cpe:/a:jenkins:jenkins:1.240
cpe:/a:jenkins:jenkins:1.241
cpe:/a:jenkins:jenkins:1.242
cpe:/a:jenkins:jenkins:1.243
cpe:/a:jenkins:jenkins:1.244
cpe:/a:jenkins:jenkins:1.245
cpe:/a:jenkins:jenkins:1.247
cpe:/a:jenkins:jenkins:1.248
cpe:/a:jenkins:jenkins:1.249
cpe:/a:jenkins:jenkins:1.250
cpe:/a:jenkins:jenkins:1.251
cpe:/a:jenkins:jenkins:1.252
cpe:/a:jenkins:jenkins:1.253
cpe:/a:jenkins:jenkins:1.254
cpe:/a:jenkins:jenkins:1.255
cpe:/a:jenkins:jenkins:1.256
cpe:/a:jenkins:jenkins:1.257
cpe:/a:jenkins:jenkins:1.258
cpe:/a:jenkins:jenkins:1.259
cpe:/a:jenkins:jenkins:1.260
cpe:/a:jenkins:jenkins:1.261
cpe:/a:jenkins:jenkins:1.262
cpe:/a:jenkins:jenkins:1.263
cpe:/a:jenkins:jenkins:1.264
cpe:/a:jenkins:jenkins:1.265
cpe:/a:jenkins:jenkins:1.266
cpe:/a:jenkins:jenkins:1.267
cpe:/a:jenkins:jenkins:1.268
cpe:/a:jenkins:jenkins:1.269
cpe:/a:jenkins:jenkins:1.270
cpe:/a:jenkins:jenkins:1.271
cpe:/a:jenkins:jenkins:1.272
cpe:/a:jenkins:jenkins:1.273
cpe:/a:jenkins:jenkins:1.274
cpe:/a:jenkins:jenkins:1.275
cpe:/a:jenkins:jenkins:1.276
cpe:/a:jenkins:jenkins:1.277
cpe:/a:jenkins:jenkins:1.278
cpe:/a:jenkins:jenkins:1.279
cpe:/a:jenkins:jenkins:1.280
cpe:/a:jenkins:jenkins:1.281
cpe:/a:jenkins:jenkins:1.282
cpe:/a:jenkins:jenkins:1.283
cpe:/a:jenkins:jenkins:1.284
cpe:/a:jenkins:jenkins:1.285
cpe:/a:jenkins:jenkins:1.286
cpe:/a:jenkins:jenkins:1.287
cpe:/a:jenkins:jenkins:1.288
cpe:/a:jenkins:jenkins:1.289
cpe:/a:jenkins:jenkins:1.290
cpe:/a:jenkins:jenkins:1.291
cpe:/a:jenkins:jenkins:1.292
cpe:/a:jenkins:jenkins:1.293
cpe:/a:jenkins:jenkins:1.294
cpe:/a:jenkins:jenkins:1.295
cpe:/a:jenkins:jenkins:1.296
cpe:/a:jenkins:jenkins:1.297
cpe:/a:jenkins:jenkins:1.298
cpe:/a:jenkins:jenkins:1.299
cpe:/a:jenkins:jenkins:1.300
cpe:/a:jenkins:jenkins:1.301
cpe:/a:jenkins:jenkins:1.302
cpe:/a:jenkins:jenkins:1.303
cpe:/a:jenkins:jenkins:1.304
cpe:/a:jenkins:jenkins:1.305
cpe:/a:jenkins:jenkins:1.306
cpe:/a:jenkins:jenkins:1.307
cpe:/a:jenkins:jenkins:1.308
cpe:/a:jenkins:jenkins:1.309
cpe:/a:jenkins:jenkins:1.310
cpe:/a:jenkins:jenkins:1.311
cpe:/a:jenkins:jenkins:1.312
cpe:/a:jenkins:jenkins:1.313
cpe:/a:jenkins:jenkins:1.314
cpe:/a:jenkins:jenkins:1.315
cpe:/a:jenkins:jenkins:1.316
cpe:/a:jenkins:jenkins:1.317
cpe:/a:jenkins:jenkins:1.318
cpe:/a:jenkins:jenkins:1.319
cpe:/a:jenkins:jenkins:1.320
cpe:/a:jenkins:jenkins:1.321
cpe:/a:jenkins:jenkins:1.322
cpe:/a:jenkins:jenkins:1.323
cpe:/a:jenkins:jenkins:1.324
cpe:/a:jenkins:jenkins:1.325
cpe:/a:jenkins:jenkins:1.326
cpe:/a:jenkins:jenkins:1.327
cpe:/a:jenkins:jenkins:1.328
cpe:/a:jenkins:jenkins:1.329
cpe:/a:jenkins:jenkins:1.330
cpe:/a:jenkins:jenkins:1.331
cpe:/a:jenkins:jenkins:1.332
cpe:/a:jenkins:jenkins:1.333
cpe:/a:jenkins:jenkins:1.334
cpe:/a:jenkins:jenkins:1.335
cpe:/a:jenkins:jenkins:1.336
cpe:/a:jenkins:jenkins:1.337
cpe:/a:jenkins:jenkins:1.338
cpe:/a:jenkins:jenkins:1.339
cpe:/a:jenkins:jenkins:1.340
cpe:/a:jenkins:jenkins:1.341
cpe:/a:jenkins:jenkins:1.342
cpe:/a:jenkins:jenkins:1.343
cpe:/a:jenkins:jenkins:1.344
cpe:/a:jenkins:jenkins:1.345
cpe:/a:jenkins:jenkins:1.346
cpe:/a:jenkins:jenkins:1.347
cpe:/a:jenkins:jenkins:1.348
cpe:/a:jenkins:jenkins:1.349
cpe:/a:jenkins:jenkins:1.350
cpe:/a:jenkins:jenkins:1.351
cpe:/a:jenkins:jenkins:1.352
cpe:/a:jenkins:jenkins:1.353
cpe:/a:jenkins:jenkins:1.354
cpe:/a:jenkins:jenkins:1.355
cpe:/a:jenkins:jenkins:1.356
cpe:/a:jenkins:jenkins:1.357
cpe:/a:jenkins:jenkins:1.358
cpe:/a:jenkins:jenkins:1.359
cpe:/a:jenkins:jenkins:1.360
cpe:/a:jenkins:jenkins:1.361
cpe:/a:jenkins:jenkins:1.362
cpe:/a:jenkins:jenkins:1.363
cpe:/a:jenkins:jenkins:1.364
cpe:/a:jenkins:jenkins:1.365
cpe:/a:jenkins:jenkins:1.366
cpe:/a:jenkins:jenkins:1.367
cpe:/a:jenkins:jenkins:1.368
cpe:/a:jenkins:jenkins:1.369
cpe:/a:jenkins:jenkins:1.370
cpe:/a:jenkins:jenkins:1.371
cpe:/a:jenkins:jenkins:1.372
cpe:/a:jenkins:jenkins:1.373
cpe:/a:jenkins:jenkins:1.374
cpe:/a:jenkins:jenkins:1.375
cpe:/a:jenkins:jenkins:1.376
cpe:/a:jenkins:jenkins:1.377
cpe:/a:jenkins:jenkins:1.378
cpe:/a:jenkins:jenkins:1.379
cpe:/a:jenkins:jenkins:1.380
cpe:/a:jenkins:jenkins:1.381
cpe:/a:jenkins:jenkins:1.382
cpe:/a:jenkins:jenkins:1.383
cpe:/a:jenkins:jenkins:1.384
cpe:/a:jenkins:jenkins:1.385
cpe:/a:jenkins:jenkins:1.386
cpe:/a:jenkins:jenkins:1.387
cpe:/a:jenkins:jenkins:1.388
cpe:/a:jenkins:jenkins:1.389
cpe:/a:jenkins:jenkins:1.390
cpe:/a:jenkins:jenkins:1.391
cpe:/a:jenkins:jenkins:1.392
cpe:/a:jenkins:jenkins:1.393
cpe:/a:jenkins:jenkins:1.394
cpe:/a:jenkins:jenkins:1.395
cpe:/a:jenkins:jenkins:1.395.1
cpe:/a:jenkins:jenkins:1.396
cpe:/a:jenkins:jenkins:1.397
cpe:/a:jenkins:jenkins:1.398
cpe:/a:jenkins:jenkins:1.399
cpe:/a:jenkins:jenkins:1.400
cpe:/a:jenkins:jenkins:1.401
cpe:/a:jenkins:jenkins:1.402
cpe:/a:jenkins:jenkins:1.403
cpe:/a:jenkins:jenkins:1.404
cpe:/a:jenkins:jenkins:1.405
cpe:/a:jenkins:jenkins:1.406
cpe:/a:jenkins:jenkins:1.407
cpe:/a:jenkins:jenkins:1.408
cpe:/a:jenkins:jenkins:1.409
cpe:/a:jenkins:jenkins:1.409.1
cpe:/a:jenkins:jenkins:1.409.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.409.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.409.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.410
cpe:/a:jenkins:jenkins:1.411
cpe:/a:jenkins:jenkins:1.412
cpe:/a:jenkins:jenkins:1.413
cpe:/a:jenkins:jenkins:1.414
cpe:/a:jenkins:jenkins:1.415
cpe:/a:jenkins:jenkins:1.416
cpe:/a:jenkins:jenkins:1.417
cpe:/a:jenkins:jenkins:1.418
cpe:/a:jenkins:jenkins:1.419
cpe:/a:jenkins:jenkins:1.419::~~lts~~~
cpe:/a:jenkins:jenkins:1.420
cpe:/a:jenkins:jenkins:1.421
cpe:/a:jenkins:jenkins:1.421::~~lts~~~
cpe:/a:jenkins:jenkins:1.422
cpe:/a:jenkins:jenkins:1.423
cpe:/a:jenkins:jenkins:1.424
cpe:/a:jenkins:jenkins:1.424.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.424.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.424.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.424.4::~~lts~~~
cpe:/a:jenkins:jenkins:1.424.5::~~lts~~~
cpe:/a:jenkins:jenkins:1.424.6::~~lts~~~
cpe:/a:jenkins:jenkins:1.425
cpe:/a:jenkins:jenkins:1.426
cpe:/a:jenkins:jenkins:1.427
cpe:/a:jenkins:jenkins:1.428
cpe:/a:jenkins:jenkins:1.429
cpe:/a:jenkins:jenkins:1.430
cpe:/a:jenkins:jenkins:1.431
cpe:/a:jenkins:jenkins:1.432
cpe:/a:jenkins:jenkins:1.433
cpe:/a:jenkins:jenkins:1.434
cpe:/a:jenkins:jenkins:1.435
cpe:/a:jenkins:jenkins:1.436
cpe:/a:jenkins:jenkins:1.437
cpe:/a:jenkins:jenkins:1.438
cpe:/a:jenkins:jenkins:1.439
cpe:/a:jenkins:jenkins:1.440
cpe:/a:jenkins:jenkins:1.441
cpe:/a:jenkins:jenkins:1.442
cpe:/a:jenkins:jenkins:1.443
cpe:/a:jenkins:jenkins:1.444
cpe:/a:jenkins:jenkins:1.445
cpe:/a:jenkins:jenkins:1.446
cpe:/a:jenkins:jenkins:1.447
cpe:/a:jenkins:jenkins:1.447.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.447.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.448
cpe:/a:jenkins:jenkins:1.449
cpe:/a:jenkins:jenkins:1.450
cpe:/a:jenkins:jenkins:1.451
cpe:/a:jenkins:jenkins:1.452
cpe:/a:jenkins:jenkins:1.453
cpe:/a:jenkins:jenkins:1.454
cpe:/a:jenkins:jenkins:1.455
cpe:/a:jenkins:jenkins:1.456
cpe:/a:jenkins:jenkins:1.457
cpe:/a:jenkins:jenkins:1.458
cpe:/a:jenkins:jenkins:1.459
cpe:/a:jenkins:jenkins:1.460
cpe:/a:jenkins:jenkins:1.461
cpe:/a:jenkins:jenkins:1.462
cpe:/a:jenkins:jenkins:1.463
cpe:/a:jenkins:jenkins:1.464
cpe:/a:jenkins:jenkins:1.465
cpe:/a:jenkins:jenkins:1.466
cpe:/a:jenkins:jenkins:1.466.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.466.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.467
cpe:/a:jenkins:jenkins:1.468
cpe:/a:jenkins:jenkins:1.469
cpe:/a:jenkins:jenkins:1.470
cpe:/a:jenkins:jenkins:1.471
cpe:/a:jenkins:jenkins:1.472
cpe:/a:jenkins:jenkins:1.473
cpe:/a:jenkins:jenkins:1.474
cpe:/a:jenkins:jenkins:1.475
cpe:/a:jenkins:jenkins:1.476
cpe:/a:jenkins:jenkins:1.477
cpe:/a:jenkins:jenkins:1.478
cpe:/a:jenkins:jenkins:1.479
cpe:/a:jenkins:jenkins:1.480
cpe:/a:jenkins:jenkins:1.480.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.480.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.480.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.480.3.1
cpe:/a:jenkins:jenkins:1.481
cpe:/a:jenkins:jenkins:1.482
cpe:/a:jenkins:jenkins:1.483
cpe:/a:jenkins:jenkins:1.483::~~lts~~~
cpe:/a:jenkins:jenkins:1.484
cpe:/a:jenkins:jenkins:1.485
cpe:/a:jenkins:jenkins:1.486
cpe:/a:jenkins:jenkins:1.487
cpe:/a:jenkins:jenkins:1.488
cpe:/a:jenkins:jenkins:1.489
cpe:/a:jenkins:jenkins:1.489::~~lts~~~
cpe:/a:jenkins:jenkins:1.490
cpe:/a:jenkins:jenkins:1.491
cpe:/a:jenkins:jenkins:1.492
cpe:/a:jenkins:jenkins:1.493
cpe:/a:jenkins:jenkins:1.494
cpe:/a:jenkins:jenkins:1.495
cpe:/a:jenkins:jenkins:1.496
cpe:/a:jenkins:jenkins:1.497
cpe:/a:jenkins:jenkins:1.498
cpe:/a:jenkins:jenkins:1.499
cpe:/a:jenkins:jenkins:1.500
cpe:/a:jenkins:jenkins:1.501
cpe:/a:jenkins:jenkins:1.502
cpe:/a:jenkins:jenkins:1.503
cpe:/a:jenkins:jenkins:1.504
cpe:/a:jenkins:jenkins:1.505
cpe:/a:jenkins:jenkins:1.506
cpe:/a:jenkins:jenkins:1.507
cpe:/a:jenkins:jenkins:1.508
cpe:/a:jenkins:jenkins:1.509
cpe:/a:jenkins:jenkins:1.509.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.509.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.509.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.509.4::~~lts~~~
cpe:/a:jenkins:jenkins:1.510
cpe:/a:jenkins:jenkins:1.511
cpe:/a:jenkins:jenkins:1.512
cpe:/a:jenkins:jenkins:1.513
cpe:/a:jenkins:jenkins:1.514
cpe:/a:jenkins:jenkins:1.515
cpe:/a:jenkins:jenkins:1.516
cpe:/a:jenkins:jenkins:1.517
cpe:/a:jenkins:jenkins:1.518
cpe:/a:jenkins:jenkins:1.519
cpe:/a:jenkins:jenkins:1.520
cpe:/a:jenkins:jenkins:1.521
cpe:/a:jenkins:jenkins:1.522
cpe:/a:jenkins:jenkins:1.523
cpe:/a:jenkins:jenkins:1.524
cpe:/a:jenkins:jenkins:1.525
cpe:/a:jenkins:jenkins:1.526
cpe:/a:jenkins:jenkins:1.527
cpe:/a:jenkins:jenkins:1.528
cpe:/a:jenkins:jenkins:1.529
cpe:/a:jenkins:jenkins:1.530
cpe:/a:jenkins:jenkins:1.531
cpe:/a:jenkins:jenkins:1.532
cpe:/a:jenkins:jenkins:1.532.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.532.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.532.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.533
cpe:/a:jenkins:jenkins:1.534
cpe:/a:jenkins:jenkins:1.535
cpe:/a:jenkins:jenkins:1.536
cpe:/a:jenkins:jenkins:1.537
cpe:/a:jenkins:jenkins:1.538
cpe:/a:jenkins:jenkins:1.539
cpe:/a:jenkins:jenkins:1.540
cpe:/a:jenkins:jenkins:1.541
cpe:/a:jenkins:jenkins:1.542
cpe:/a:jenkins:jenkins:1.543
cpe:/a:jenkins:jenkins:1.544
cpe:/a:jenkins:jenkins:1.545
cpe:/a:jenkins:jenkins:1.546
cpe:/a:jenkins:jenkins:1.547
cpe:/a:jenkins:jenkins:1.548
cpe:/a:jenkins:jenkins:1.549
cpe:/a:jenkins:jenkins:1.550
cpe:/a:jenkins:jenkins:1.551
cpe:/a:jenkins:jenkins:1.552
cpe:/a:jenkins:jenkins:1.553
cpe:/a:jenkins:jenkins:1.554
cpe:/a:jenkins:jenkins:1.554.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.554.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.554.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.555
cpe:/a:jenkins:jenkins:1.556
cpe:/a:jenkins:jenkins:1.557
cpe:/a:jenkins:jenkins:1.558
cpe:/a:jenkins:jenkins:1.559
cpe:/a:jenkins:jenkins:1.560
cpe:/a:jenkins:jenkins:1.561
cpe:/a:jenkins:jenkins:1.562
cpe:/a:jenkins:jenkins:1.563
cpe:/a:jenkins:jenkins:1.564
cpe:/a:jenkins:jenkins:1.565
cpe:/a:jenkins:jenkins:1.565.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.565.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.565.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.566
cpe:/a:jenkins:jenkins:1.567
cpe:/a:jenkins:jenkins:1.568
cpe:/a:jenkins:jenkins:1.569
cpe:/a:jenkins:jenkins:1.570
cpe:/a:jenkins:jenkins:1.571
cpe:/a:jenkins:jenkins:1.572
cpe:/a:jenkins:jenkins:1.573
cpe:/a:jenkins:jenkins:1.574
cpe:/a:jenkins:jenkins:1.575
cpe:/a:jenkins:jenkins:1.576
cpe:/a:jenkins:jenkins:1.577
cpe:/a:jenkins:jenkins:1.578
cpe:/a:jenkins:jenkins:1.579
cpe:/a:jenkins:jenkins:1.580
cpe:/a:jenkins:jenkins:1.580.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.580.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.580.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.581
cpe:/a:jenkins:jenkins:1.582
cpe:/a:jenkins:jenkins:1.583
cpe:/a:jenkins:jenkins:1.584
cpe:/a:jenkins:jenkins:1.585
cpe:/a:jenkins:jenkins:1.586
cpe:/a:jenkins:jenkins:1.587
cpe:/a:jenkins:jenkins:1.588
cpe:/a:jenkins:jenkins:1.589
cpe:/a:jenkins:jenkins:1.590
cpe:/a:jenkins:jenkins:1.591
cpe:/a:jenkins:jenkins:1.592
cpe:/a:jenkins:jenkins:1.593
cpe:/a:jenkins:jenkins:1.594
cpe:/a:jenkins:jenkins:1.595
cpe:/a:jenkins:jenkins:1.596
cpe:/a:jenkins:jenkins:1.596.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.596.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.596.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.597
cpe:/a:jenkins:jenkins:1.598
cpe:/a:jenkins:jenkins:1.599
cpe:/a:jenkins:jenkins:1.600
cpe:/a:jenkins:jenkins:1.601
cpe:/a:jenkins:jenkins:1.602
cpe:/a:jenkins:jenkins:1.603
cpe:/a:jenkins:jenkins:1.604
cpe:/a:jenkins:jenkins:1.605
cpe:/a:jenkins:jenkins:1.606
cpe:/a:jenkins:jenkins:1.607
cpe:/a:jenkins:jenkins:1.608
cpe:/a:jenkins:jenkins:1.609
cpe:/a:jenkins:jenkins:1.609.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.609.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.609.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.610
cpe:/a:jenkins:jenkins:1.611
cpe:/a:jenkins:jenkins:1.612
cpe:/a:jenkins:jenkins:1.613
cpe:/a:jenkins:jenkins:1.614
cpe:/a:jenkins:jenkins:1.615
cpe:/a:jenkins:jenkins:1.616
cpe:/a:jenkins:jenkins:1.617
cpe:/a:jenkins:jenkins:1.618
cpe:/a:jenkins:jenkins:1.619
cpe:/a:jenkins:jenkins:1.620
cpe:/a:jenkins:jenkins:1.621
cpe:/a:jenkins:jenkins:1.622
cpe:/a:jenkins:jenkins:1.623
cpe:/a:jenkins:jenkins:1.624
cpe:/a:jenkins:jenkins:1.625
cpe:/a:jenkins:jenkins:1.625.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.625.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.625.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.626
cpe:/a:jenkins:jenkins:1.627
cpe:/a:jenkins:jenkins:1.628
cpe:/a:jenkins:jenkins:1.629
cpe:/a:jenkins:jenkins:1.630
cpe:/a:jenkins:jenkins:1.631
cpe:/a:jenkins:jenkins:1.632
cpe:/a:jenkins:jenkins:1.633
cpe:/a:jenkins:jenkins:1.634
cpe:/a:jenkins:jenkins:1.635
cpe:/a:jenkins:jenkins:1.636
cpe:/a:jenkins:jenkins:1.637
cpe:/a:jenkins:jenkins:1.637::~~lts~~~
cpe:/a:jenkins:jenkins:1.638
cpe:/a:jenkins:jenkins:1.639
cpe:/a:jenkins:jenkins:1.640
cpe:/a:jenkins:jenkins:1.641
cpe:/a:jenkins:jenkins:1.642
cpe:/a:jenkins:jenkins:1.642.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.642.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.642.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.642.4::~~lts~~~
cpe:/a:jenkins:jenkins:1.643
cpe:/a:jenkins:jenkins:1.644
cpe:/a:jenkins:jenkins:1.645
cpe:/a:jenkins:jenkins:1.646
cpe:/a:jenkins:jenkins:1.647
cpe:/a:jenkins:jenkins:1.648
cpe:/a:jenkins:jenkins:1.649
cpe:/a:jenkins:jenkins:1.650
cpe:/a:jenkins:jenkins:1.651
cpe:/a:jenkins:jenkins:1.651.1::~~lts~~~
cpe:/a:jenkins:jenkins:1.651.2::~~lts~~~
cpe:/a:jenkins:jenkins:1.651.3::~~lts~~~
cpe:/a:jenkins:jenkins:1.652
cpe:/a:jenkins:jenkins:1.653
cpe:/a:jenkins:jenkins:1.654
cpe:/a:jenkins:jenkins:1.655
cpe:/a:jenkins:jenkins:1.656
cpe:/a:jenkins:jenkins:1.657
cpe:/a:jenkins:jenkins:1.658
cpe:/a:jenkins:jenkins:2.0
cpe:/a:jenkins:jenkins:2.0::~~lts~~~
cpe:/a:jenkins:jenkins:2.1
cpe:/a:jenkins:jenkins:2.2
cpe:/a:jenkins:jenkins:2.3
cpe:/a:jenkins:jenkins:2.4
cpe:/a:jenkins:jenkins:2.5
cpe:/a:jenkins:jenkins:2.6
cpe:/a:jenkins:jenkins:2.7
cpe:/a:jenkins:jenkins:2.7.1
cpe:/a:jenkins:jenkins:2.7.1::~~lts~~~
cpe:/a:jenkins:jenkins:2.7.2
cpe:/a:jenkins:jenkins:2.7.2::~~lts~~~
cpe:/a:jenkins:jenkins:2.7.3
cpe:/a:jenkins:jenkins:2.7.3::~~lts~~~
cpe:/a:jenkins:jenkins:2.7.4
cpe:/a:jenkins:jenkins:2.7.4::~~lts~~~
cpe:/a:jenkins:jenkins:2.8
cpe:/a:jenkins:jenkins:2.9
cpe:/a:jenkins:jenkins:2.10
cpe:/a:jenkins:jenkins:2.11
cpe:/a:jenkins:jenkins:2.12
cpe:/a:jenkins:jenkins:2.13
cpe:/a:jenkins:jenkins:2.14
cpe:/a:jenkins:jenkins:2.14::~~lts~~~
cpe:/a:jenkins:jenkins:2.15
cpe:/a:jenkins:jenkins:2.15::~~lts~~~
cpe:/a:jenkins:jenkins:2.16
cpe:/a:jenkins:jenkins:2.17
cpe:/a:jenkins:jenkins:2.18
cpe:/a:jenkins:jenkins:2.19
cpe:/a:jenkins:jenkins:2.19.1
cpe:/a:jenkins:jenkins:2.19.1::~~lts~~~
cpe:/a:jenkins:jenkins:2.19.2::~~lts~~~
cpe:/a:jenkins:jenkins:2.19.3
cpe:/a:jenkins:jenkins:2.19.3::~~lts~~~
cpe:/a:jenkins:jenkins:2.19.4
cpe:/a:jenkins:jenkins:2.19.4::~~lts~~~
cpe:/a:jenkins:jenkins:2.20
cpe:/a:jenkins:jenkins:2.20::~~lts~~~
cpe:/a:jenkins:jenkins:2.21
cpe:/a:jenkins:jenkins:2.22
cpe:/a:jenkins:jenkins:2.23
cpe:/a:jenkins:jenkins:2.24
cpe:/a:jenkins:jenkins:2.25
cpe:/a:jenkins:jenkins:2.26
cpe:/a:jenkins:jenkins:2.27
cpe:/a:jenkins:jenkins:2.28
cpe:/a:jenkins:jenkins:2.29
cpe:/a:jenkins:jenkins:2.30
cpe:/a:jenkins:jenkins:2.31
cpe:/a:jenkins:jenkins:2.32
cpe:/a:jenkins:jenkins:2.32.1
cpe:/a:jenkins:jenkins:2.32.1::~~lts~~~
cpe:/a:jenkins:jenkins:2.32.2
cpe:/a:jenkins:jenkins:2.32.2::~~lts~~~
cpe:/a:jenkins:jenkins:2.32.3
cpe:/a:jenkins:jenkins:2.32.3::~~lts~~~
cpe:/a:jenkins:jenkins:2.33
cpe:/a:jenkins:jenkins:2.34
cpe:/a:jenkins:jenkins:2.35
cpe:/a:jenkins:jenkins:2.36
cpe:/a:jenkins:jenkins:2.37
cpe:/a:jenkins:jenkins:2.38
cpe:/a:jenkins:jenkins:2.39
cpe:/a:jenkins:jenkins:2.40
cpe:/a:jenkins:jenkins:2.41
cpe:/a:jenkins:jenkins:2.42
cpe:/a:jenkins:jenkins:2.43

- OVAL (用于检测的技术细节)

未找到相关OVAL定义

- 官方数据库链接

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2598
(官方数据源) MITRE
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-2598
(官方数据源) NVD

- 其它链接及资源

http://www.securityfocus.com/bid/95948
(VENDOR_ADVISORY)  BID  95948
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2598
(UNKNOWN)  CONFIRM  https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2598
https://github.com/jenkinsci/jenkins/commit/e6aa166246d1734f4798a9e31f78842f4c85c28b
(PATCH)  CONFIRM  https://github.com/jenkinsci/jenkins/commit/e6aa166246d1734f4798a9e31f78842f4c85c28b
https://jenkins.io/security/advisory/2017-02-01/
(VENDOR_ADVISORY)  CONFIRM  https://jenkins.io/security/advisory/2017-02-01/

- 漏洞信息

Jenkins CVE-2017-2598 Information Disclosure Vulnerability
Design Error 95948
Yes No
2017-02-02 12:00:00 2017-02-02 11:04:00
Ben Walding, CloudBees, Inc.

- 受影响的程序版本

Jenkins-Ci Jenkins LTS 2.32.1
Jenkins-Ci Jenkins LTS 2.19.3
Jenkins-Ci Jenkins LTS 2.19.2
Jenkins-Ci Jenkins LTS 1.652.2
Jenkins-Ci Jenkins LTS 1.651.2
Jenkins-Ci Jenkins LTS 1.651.1
Jenkins-Ci Jenkins LTS 1.642.2
Jenkins-Ci Jenkins LTS 1.642.1
Jenkins-Ci Jenkins LTS 1.625.3
Jenkins-Ci Jenkins LTS 1.625.2
Jenkins-Ci Jenkins LTS 1.625.1
Jenkins-Ci Jenkins LTS 1.609.1
Jenkins-Ci Jenkins LTS 1.580.1
Jenkins-Ci Jenkins LTS 1.565.3
Jenkins-Ci Jenkins 1.7.24
Jenkins-Ci Jenkins 2.43
Jenkins-Ci Jenkins 2.32
Jenkins-Ci Jenkins 2.31
Jenkins-Ci Jenkins 2.3
Jenkins-Ci Jenkins 2.2
Jenkins-Ci Jenkins 2.1
Jenkins-Ci Jenkins 2.0
Jenkins-Ci Jenkins 1.7.24.1
Jenkins-Ci Jenkins 1.656
Jenkins-Ci Jenkins 1.655
Jenkins-Ci Jenkins 1.654
Jenkins-Ci Jenkins 1.653
Jenkins-Ci Jenkins 1.652
Jenkins-Ci Jenkins 1.651
Jenkins-Ci Jenkins 1.650
Jenkins-Ci Jenkins 1.649
Jenkins-Ci Jenkins 1.641
Jenkins-Ci Jenkins 1.640
Jenkins-Ci Jenkins 1.638
Jenkins-Ci Jenkins 1.637
Jenkins-Ci Jenkins 1.600
Jenkins-Ci Jenkins 1.587
Jenkins-Ci Jenkins 1.578
Jenkins-Ci Jenkins 1.551
Jenkins-Ci Jenkins 1.550
Jenkins-Ci Jenkins 1.532.2
Jenkins-Ci Jenkins 1.532.1
Jenkins-Ci Jenkins 1.523
Jenkins-Ci Jenkins 1.514
Jenkins-Ci Jenkins 1.513
Jenkins-Ci Jenkins 1.509.1
Jenkins-Ci Jenkins 1.509
Jenkins-Ci Jenkins 1.502
,Jenkins-Ci Jenkins LTS 2.32.2
Jenkins-Ci Jenkins 2.44

- 不受影响的程序版本

Jenkins-Ci Jenkins LTS 2.32.2
Jenkins-Ci Jenkins 2.44

- 漏洞讨论

Jenkins is prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks.

The following versions are affected:

Jenkins 2.43 and prior versions.
Jenkins LTS 2.32.1 and prior versions.

- 漏洞利用

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.

- 解决方案

Updates are available. Please see the references or vendor advisory for more information.

- 相关参考

 

 

关于SCAP中文社区

SCAP中文社区是国内第一个以SCAP为主题的中文开放社区。了解更多信息,请查阅[关于本站]

版权声明

CVE/CWE/OVAL均为MITRE公司的注册商标,它们的官方数据源均保存在MITRE公司的相关网站