CVSS 3.0
4.3 mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCVE-2017-2600
Medium (4.3) in jenkins jenkins. EPSS 1.0% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.main:jenkins-core 2.32.2, 2.44.
In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes (SECURITY-343).
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-200, CWE-325
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:jenkins
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-wj5c-j656-h5fw | Maven | org.jenkins-ci.main:jenkins-core | <2.32.2 | 2.32.2 |
| GHSA-wj5c-j656-h5fw | Maven | org.jenkins-ci.main:jenkins-core | >=2.34 <2.44 | 2.44 |