{"action":"Upgrade org.jenkins-ci.main:jenkins-core to 2.46.2 (2.46.x) or 2.57 (2.57.x) or later.","affected":[{"fixed":"2.57","introduced":"2.50"},{"fixed":"2.46.2","introduced":"0"}],"component":"org.jenkins-ci.main:jenkins-core","cve_ids":["CVE-2017-1000354"],"ecosystem":"Maven","epss":0.01214,"exploited":false,"fixed_versions":["2.57","2.46.2"],"ghsa_id":"GHSA-r57f-7xw3-q2r9","id":"tcs_01M5N9AZP5CQTNX26AYWRW3KNG","modified_at":"2024-04-19T19:16:00.641096Z","published_at":"2022-05-14T03:44:30Z","references":["https://osv.dev/vulnerability/GHSA-r57f-7xw3-q2r9","https://nvd.nist.gov/vuln/detail/CVE-2017-1000354","https://github.com/jenkinsci/jenkins/commit/02d24053bdfeb219d2387a19885a60bdab510479","https://github.com/jenkinsci/jenkins","https://jenkins.io/security/advisory/2017-04-26","https://web.archive.org/web/20200227174424/http://www.securityfocus.com/bid/98065"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-r57f-7xw3-q2r9","url":"https://osv.dev/vulnerability/GHSA-r57f-7xw3-q2r9"}],"summary":"Improper Authentication in Jenkins"}