CVE-2017-1000242

2017-11-0113:29:00

Google

osv.dev

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure

CPENameOperatorVersion
git-client-plugineqgit-client-1.0.4
git-client-plugineqgit-client-1.20.0-beta2
git-client-plugineqgit-client-1.4.2
git-client-plugineqgit-client-1.1
git-client-plugineqgit-client-1.9.1
git-client-plugineqgit-client-1.17.0
git-client-plugineqgit-client-1.0.3
git-client-plugineqgit-client-1.2.0
git-client-plugineqgit-client-1.13.0
git-client-plugineqgit-client-1.18.0

Name	Operator	Version
git-client-plugin	eq	git-client-1.0.4
git-client-plugin	eq	git-client-1.20.0-beta2
git-client-plugin	eq	git-client-1.4.2
git-client-plugin	eq	git-client-1.1
git-client-plugin	eq	git-client-1.9.1
git-client-plugin	eq	git-client-1.17.0
git-client-plugin	eq	git-client-1.0.3
git-client-plugin	eq	git-client-1.2.0
git-client-plugin	eq	git-client-1.13.0
git-client-plugin	eq	git-client-1.18.0