[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foyOT8NP-EivgzFVrMUNTlsB71dpBrL3Q50i7sEUGmZw":3,"g5a-risk:CVE-2017-1000104":108},{"success":4,"data":5,"meta":106},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":58,"weaknesses":59,"weaknessesCount":49,"isActivelyExploited":68,"cisaInfo":15,"otxData":15,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":104,"notableEvents":105},"CVE-2017-1000104","What is CVE-2017-1000104?","The Config File Provider Plugin is used to centrally manage configuration files that often include secrets, such as passwords. Users with only Overall\u002FRead access to Jenkins were able to access URLs directly that allowed viewing these files. Access to view these files now requires sufficient permissions to configure the provided files, view the configuration of the folder in which the configuration files are defined, or have Job\u002FConfigure permissions to a job able to use these files.","The Config File Provider Plugin is used to centrally manage configuration files that often include secrets, such as passwords. Users with only Overall\u002FRead a...","2017-10-05T01:29:04.213","2025-04-20T01:37:25.86",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",2.8,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":27,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.00818,[40,40,40,40,40,40,40],"Medium",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"jenkins","config_file_provider","*","cpe:2.3:a:jenkins:config_file_provider:*:*:*:*:*:jenkins:*:*",1,[51,56],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fjenkins.io\u002Fsecurity\u002Fadvisory\u002F2017-08-07\u002F","Jenkins",[55],"Vendor Advisory",{"url":52,"source":53,"tags":57},[55],2,[60],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2017-1000104? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-1000104, a medium severity cyber security vulnerability from 2017. The Config File Provider Plugin is used to centrally ma...","CVE-2017-1000104, CVE-2017-1000104 vulnerability, CVE-2017-1000104 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, jenkins security, config_file_provider vulnerability","\u002Fwhat-is\u002Fcve-2017-1000104",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-1000104","Cybersecurity","CVE-2017-1000104, CVE-2017-1000104 vulnerability, CVE-2017-1000104 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":15,"Negate":15,"Nodes":97},[98],{"Operator":99,"Negate":15,"CPEMatch":100},"OR",[101],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":102,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":103},"A2DC94C7-A818-4D02-A180-CC0FC7A820C1","2.16.1",[],[],{"lastModified":11,"cacheTime":107,"version":33},1792356058206,{"score":109,"band":110,"action":111,"scoredAt":112},23,"Low","Monitor","2026-10-17T09:12:10.265435+00:00"]