Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-1000242

16
FAUCET Score

CVE-2017-1000242 describes an information disclosure vulnerability in the Jenkins Git Client Plugin versions 2.4.2 and earlier, where temporary files are created with insecure permissions. This flaw has a CVSS score of 3.3 (LOW), indicating a local attack vector with low complexity, requiring low privileges, and primarily impacting confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.4.2CPE matchmatch criteria
cpe:2.3:a:jenkins:git_client:*:*:*:*:*:jenkins:*:*

CVSS Data

CVSS version used by this source: 3.0

3.3LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
1.8
Impact Score
1.4
CvssVersion
3.0

Exploit Intelligence

EPSS Score
0.38%
Probability of exploitation in next 30 days
EPSS Percentile
30.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0038 is in the 86th percentile among its peer group of 1,509 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

mavenpatch availablevia ghsa
Product: org.jenkins-ci.plugins:git-clientFixed in: 2.4.3
redhatno patchvia redhat_api
Product: Red Hat OpenShift Enterprise 3Fixed in: jenkins-plugin-git-client

Vendor Advisories (2)

mavenGHSA-fcxw-hhxq-48wxlow

Insecure temporary file usage in Jenkins Git Client Plugin

May 17, 2022
redhatCVE-2017-1000242Low

jenkins-plugin-git-client: Storing sensitive information in world-readable temporary files (SECURITY-445)

Apr 27, 2017

References

jenkins.io / security/advisory/2017-04-27
MitigationVendor Advisory
securityfocus.com / bid/101940