CVE-2017-16520

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.

• CWE-269

• https://inedo.com/blog/buildmaster-582-releasedVendor Advisory
• https://inedo.com/buildmaster/versions#v5.8Vendor Advisory
• https://inedo.myjetbrains.com/youtrack/issue/BM-3107Vendor Advisory
• https://inedo.com/blog/buildmaster-582-releasedVendor Advisory
• https://inedo.com/buildmaster/versions#v5.8Vendor Advisory
• https://inedo.myjetbrains.com/youtrack/issue/BM-3107Vendor Advisory

Published

Nov 11, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16510WordPress before 4.8.3 is affected by an issue where $wpdb->…
• CVE-2017-16512The vagrant update process in Hashicorp vagrant-vmware-fusio…
• CVE-2017-16513Ipswitch WS_FTP Professional before 12.6.0.3 has buffer over…
• CVE-2017-16514Multiple persistent stored Cross-Site-Scripting (XSS) vulner…
• CVE-2017-16516In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON fil…7.5
• CVE-2017-1652IBM Rational Quality Manager and IBM Rational Collaborative …5.4
• CVE-2017-16521In Inedo BuildMaster before 5.8.2, XslTransform was used whe…
• CVE-2017-16522MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 E…
• CVE-2017-16523MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 E…
• CVE-2017-16524Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers fr…
• CVE-2017-16525The usb_serial_console_disconnect function in drivers/usb/se…6.6
• CVE-2017-16526drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows …7.8