LOW 3.3 Maven
Insecure temporary file usage in Jenkins Git Client Plugin
GHSA-fcxw-hhxq-48wx · CVE-2017-1000242
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2017-1000242
- WEB https://github.com/jenkinsci/git-client-plugin/commit/75ea3fe05650fc6ca09046a72493e2b3f066fb98
- PACKAGE https://github.com/jenkinsci/git-client-plugin
- WEB https://jenkins.io/security/advisory/2017-04-27
- WEB http://www.securityfocus.com/bid/101940
Ready to move
Start Securing
Free, no credit card | First findings in minutes