CVE-2017-1000356

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user database authentication realm: create an account if signup is enabled; or create an account if the victim is an administrator, possibly deleting the existing default admin user in the process and allowing a wide variety of impacts.

• CWE-352

• http://www.securityfocus.com/bid/98062Third Party Advisory, VDB Entry
• https://jenkins.io/security/advisory/2017-04-26/Vendor Advisory
• http://www.securityfocus.com/bid/98062Third Party Advisory, VDB Entry
• https://jenkins.io/security/advisory/2017-04-26/Vendor Advisory

Published

Jan 29, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000256libvirt version 2.3.0 and later is vulnerable to a bad defau…8.1
• CVE-2017-1000257An IMAP FETCH response line indicates the size of the return…9.1
• CVE-2017-10003Vulnerability in the Solaris component of Oracle Sun Systems…
• CVE-2017-1000353Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and …9.8
• CVE-2017-1000354Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and …
• CVE-2017-1000355Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and …
• CVE-2017-1000357Denial of Service attack when the switch rejects to receive …
• CVE-2017-1000358Controller throws an exception and does not allow user to ad…
• CVE-2017-1000359Java out of memory error and significant increase in resourc…
• CVE-2017-1000360StreamCorruptedException and NullPointerException in OpenDay…
• CVE-2017-1000361DOMRpcImplementationNotAvailableException when sending Port-…
• CVE-2017-1000362The re-key admin monitor was introduced in Jenkins 1.498 and…