Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2017-2600

In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes (SECURITY-343).

Published: May 15, 2018
Updated: Nov 9, 2025
CVE: CVE-2017-2600
GHSA: GHSA-wj5c-j656-h5fw
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4
AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs:

CWE-200
CWE-325

OWASP TOP 10:

A3 - Sensitive Data Exposure

Affected Software
References

Software	From	Fixed in
jenkins / jenkins	-	2.44
jenkins / jenkins	-	2.32.2
org.jenkins-ci.main / jenkins-core	-	2.32.2
org.jenkins-ci.main / jenkins-core	2.34	2.44

http://www.securityfocus.com/bid/95954
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2600
https://github.com/jenkinsci/jenkins/commit/0f92cd08a19207de2cceb6a2f4e3e9f92fdc0899
https://jenkins.io/security/advisory/2017-02-01/

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo