Jenkins Enterprise および Operations Center 2.346.x < 2.346.40.0.9 の複数の脆弱性 (CloudBees セキュリティアドバイザリ 2023 年 2 月 15 日)

critical Nessus プラグイン ID 171501

バージョン 1.3

Sep 4, 2023, 4:15 PM

  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C")
  • CVSSv3 score source (set to "CVE-2023-25765")
  • Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available")

Plugin Feed: 202309041615

バージョン 1.2

Feb 27, 2023, 2:07 PM

  • CVSSv2 score source (changed from "CVE-2023-25765" to "CVE-2023-25767")
  • CVSS metrics ("CVSSv2 score" changed from "9.0" to "10.0". "CVSSv2 score" changed from "9.0" to "10.0". "CVSSv2 score" changed from "9.0" to "10.0". "CVSSv2 score" changed from "9.0" to "10.0". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C")

Plugin Feed: 202302271407

バージョン 1.1

Feb 23, 2023, 2:02 PM

  • CVSS metrics ("CVSSv3 score" changed from "8.8" to "9.9". "CVSSv3 score" changed from "8.8" to "9.9". "CVSSv3 score" changed from "8.8" to "9.9". "CVSSv3 score" changed from "8.8" to "9.9". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H". "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H")
  • CVSSv3 score source (set to "CVE-2023-25765")

Plugin Feed: 202302231402

バージョン 1.0

Feb 15, 2023, 8:04 PM

  • New

Plugin Feed: 202302152004

* Changelogs are generally available for changes made after Nov 1, 2022