CVE-2017-1000362

CVE-2017-1000362 is a critical vulnerability affecting Jenkins versions 1.498 and later, where a re-keying process created world-readable backup directories containing sensitive secrets and their encryption keys. This flaw, rated 9.8 Critical on CVSSv3, allows unauthenticated attackers to achieve complete compromise (confidentiality, integrity, availability) due to network-based access with low attack complexity. While there is no known active exploitation, public exploit code, or significant community discussion, the vulnerability's high severity and ease of exploitation warrant immediate attention. Jenkins has released a fix to delete these backup directories, and administrators are advised to manually check and remove any existing "$JENKINS_HOME/jenkins.security.RekeySecretAdminMonitor/backups" directories.