CVE-2017-2650

https://notcve.org/view.php?id=CVE-2017-2650

27 Jul 2018 — It was found that the use of Pipeline: Classpath Step Jenkins plugin enables a bypass of the Script Security sandbox for users with SCM commit access, as well as users with e.g. Job/Configure permission in Jenkins. Se ha descubierto que el uso del plugin Pipeline: Classpath Step de Jenkins permite la omisión del sandbox de Script Security para los usuarios con acceso de commit SCM, así como para los usuarios con permiso Job/Configure en Jenkins. • http://www.securityfocus.com/bid/96981 • CWE-592: DEPRECATED: Authentication Bypass Issues •