Lucene search
Redhat.comRH:CVE-2017-1000356HistoryApr 27, 2017 - 9:48 a.m.
CVE-2017-1000356
2017-04-2709:48:18
redhat.com
access.redhat.com
15
EPSS
0.009
Percentile
82.7%
Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user database authentication realm: create an account if signup is enabled; or create an account if the victim is an administrator, possibly deleting the existing default admin user in the process and allowing a wide variety of impacts.
Related
cvelist
cvelist
CVE-2017-1000356
2018-01-29 17:00:00
osv
osv
CVE-2017-1000356
2018-01-29 17:29:00
Cross-Site Request Forgery in Jenkins
2022-05-14 03:44:36
github
github
Cross-Site Request Forgery in Jenkins
2022-05-14 03:44:36
checkpoint_advisories
checkpoint_advisories
Jenkins CI Server Multiple Cross-Site Request Forgery (CVE-2017-1000356)
2017-06-07 00:00:00
ubuntucve
ubuntucve
CVE-2017-1000356
2018-01-29 00:00:00
prion
prion
Authentication flaw
2018-01-29 17:29:00
seebug
seebug
Jenkins Multiple CSRF vulnerabilities (CVE-2017-1000356)
2017-04-28 00:00:00
nvd
nvd
CVE-2017-1000356
2018-01-29 17:29:00
cve
cve
CVE-2017-1000356
2018-01-29 17:29:00
archlinux
archlinux
[ASA-201704-8] jenkins: multiple issues
2017-04-27 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2017-04-26 00:00:00
nessus
nessus
openvas
openvas
Jenkins Multiple Vulnerabilities (Apr 2017) - Linux
2017-04-28 00:00:00
Jenkins Multiple Vulnerabilities (Apr 2017) - Windows
2017-04-28 00:00:00