|
||||||||||||||
This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira |
[JIRA] (JENKINS-16103) If Anonymous has overall read access, anyone can connect as a slave over JNLP
andrew.colle...@gmail.com (JIRA) Wed, 12 Dec 2012 12:09:45 -0800
- [JIRA] (JENKINS-16103) If Anonymous has o... andrew.colle...@gmail.com (JIRA)
- [JIRA] (JENKINS-16103) If Anonymous ... andrew.colle...@gmail.com (JIRA)
- [JIRA] (JENKINS-16103) If Anonymous ... jgl...@cloudbees.com (JIRA)
- [JIRA] (JENKINS-16103) If Anonymous ... jgl...@cloudbees.com (JIRA)
- [JIRA] (JENKINS-16103) If Anonymous ... k...@kohsuke.org (JIRA)
I have just tested this again and confirmed I can connect as a slave without any credentials. This seems like a serious security hole.