vulnerability
Jenkins Advisory 2016-05-11: CVE-2016-3721: Arbitrary build parameters are passed to build scripts as environment variables
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:N/I:P/A:N) | May 17, 2016 | Nov 13, 2017 | Nov 27, 2024 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
May 17, 2016
Added
Nov 13, 2017
Modified
Nov 27, 2024
Description
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.
Solutions
jenkins-lts-upgrade-1_651_2jenkins-upgrade-2_3
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.