-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Major
-
Component/s: packaging
-
Environment:Jenkins 1.599, Windows Server
Jenkins ships with a known insecure version of Java. When combined with the previously filed bug of running as system access, it's theoretically possible that vulnerabilities in the shipping version of Java to elevate privilege on the machine where Jenkins operates.