CVE-2017-1000086

{"id": "CVE-2017-1000086", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.1}]}, "published": "2017-10-05T01:29:03.570", "references": [{"url": "http://www.securityfocus.com/bid/100437", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://jenkins.io/security/advisory/2017-07-10/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "The Periodic Backup Plugin did not perform any permission checks, allowing any user with Overall/Read access to change its settings, trigger backups, restore backups, download backups, and also delete all previous backups via log rotation. Additionally, the plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Request Forgery attacks."}, {"lang": "es", "value": "El plugin Period Backup no realiza ning\u00fan chequeo de permisos, lo que permite que cualquier usuario con acceso Overall/Read cambie su configuraci\u00f3n, haga copias de seguridad, recupere o descargue copias de seguridad y tambi\u00e9n borre todas las copias de seguridad anteriores mediante la rotaci\u00f3n de logs. Adem\u00e1s, el plugin no necesita que se env\u00eden peticiones a su API mediante POST, exponi\u00e9ndose, en consecuencia, a ataques de tipo Cross-Site Request Forgery (CSRF)."}], "lastModified": "2020-08-24T17:37:01.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jenkins:periodic_backup:1.0:*:*:*:*:jenkins:*:*", "vulnerable": true, "matchCriteriaId": "E0FAA343-6C7F-4F8B-9258-2580F7FE43E5"}, {"criteria": "cpe:2.3:a:jenkins:periodic_backup:1.1:*:*:*:*:jenkins:*:*", "vulnerable": true, "matchCriteriaId": "D2A325BD-75E3-48AC-980C-A520C586C3BB"}, {"criteria": "cpe:2.3:a:jenkins:periodic_backup:1.2:*:*:*:*:jenkins:*:*", "vulnerable": true, "matchCriteriaId": "D59D73CB-D25A-4DAC-BFCB-638EC21AB171"}, {"criteria": "cpe:2.3:a:jenkins:periodic_backup:1.3:*:*:*:*:jenkins:*:*", "vulnerable": true, "matchCriteriaId": "FB8D6B9A-BC01-47AF-8DC8-88BBA93A04DB"}, {"criteria": "cpe:2.3:a:jenkins:periodic_backup:1.4:*:*:*:*:jenkins:*:*", "vulnerable": true, "matchCriteriaId": "53976206-EA0F-4CA6-9781-E50D0DC2BDFE"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}