[java-sig-commits] [Bug 1576712] CVE-2018-1000195 jenkins: Users with Overall/ Read permission were able to send GET requests to any URL (SECURITY-794)
https://bugzilla.redhat.com/show_bug.cgi?id=1576712
Jason Shepherd <jshepherd(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20180509, |impact=low,public=20180509,
|reported=20180509,source=in |reported=20180509,source=in
|ternet,cvss3=3.5/CVSS:3.0/A |ternet,cvss3=3.5/CVSS:3.0/A
|V:N/AC:H/PR:L/UI:N/S:C/C:L/ |V:N/AC:H/PR:L/UI:N/S:C/C:L/
|I:N/A:N,cwe=CWE-285,openshi |I:N/A:N,cwe=CWE-285,openshi
|ft-enterprise-3/jenkins=aff |ft-enterprise-3/jenkins=aff
|ected,openshift-1/jenkins=a |ected,openshift-1/jenkins=d
|ffected,fedora-all/jenkins= |efer,fedora-all/jenkins=aff
|affected |ected
--
You are receiving this mail because:
You are on the CC list for the bug.