Jenkins 2. setup wizard is failing at the final step after entering the admin username and password details .identified it as CSRF vulnerability as a result network blocked the ( completeInstall and createAdminUser files.As per http://telussecuritylabs.com/threats/show/TSL20170428-01 document I tried to install the latest fixed version(2.57) but still it appears to have the same issue.
Do we have fix for this security vulnerability.
[JENKINS-45169] Jenkins 2 setup wizard failing :Unable to connect to Jenkins
Resolution | New: Not A Defect [ 7 ] | |
Status | Original: Open [ 1 ] | New: Resolved [ 5 ] |
Attachment | New: 10.133.210.167-Packet Captures.zip [ 39054 ] |
Attachment | New: Firewall Log File for 10.133.210.167 Vulnerability Alert.xlsx [ 39055 ] |
Resolution | Original: Not A Defect [ 7 ] | |
Status | Original: Resolved [ 5 ] | New: Reopened [ 4 ] |
Resolution | New: Not A Defect [ 7 ] | |
Status | Original: Reopened [ 4 ] | New: Resolved [ 5 ] |