Re: SQL Injection Vulnerability

2015-02-03 Thread Wt Riker
Thanks. I will move this to that forum. -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. To view this discussion on

Re: Flash Player Vulnerability

2015-02-03 Thread Wt Riker
The link is: http://jenkins.server.com:8080/static/452bd4e7/scripts/yui/connection/connection-min.js I don't know what page contains that link or how it gets generates. Perhaps you can direct me on how to figure that out. -- You received this message because you are subscribed to the Google Gr

Web Vulnerability

2015-02-03 Thread Wt Riker
I have uncovered a security vulnerability in Jenkins (1.569) that needs to be resolved. When creating a job this link results: http://jenkins.server.com:8080/job/64-bit_CHRIS_PLAY_TEST_HUV02MS/descriptorByName/hudson.scm.ExcludedRegion/checkPattern As a sys admin, not a Jenkins admin, I do not k

SQL Injection Vulnerability

2015-02-03 Thread Wt Riker
I posted this once but it seems to have disappeared so my apologies if it shows up as a duplicate. I have discovered a security vulnerability in Jenkins (1.569). I am a sys admin, not a Jenkins admin, so I do not know how this link is generate and I don't want to start mucking with Jenkins code

Flash Player Vulnerability

2015-02-03 Thread Wt Riker
I found a vulnerability in flash player but it was simple enough to resolve myself. However this should be added to the next release. In the javascript file: .jenkins/war/scripts/yui/connection/connection-min.js This line: Needs to be changed to: This vulnerability makes it possible to st

Re: Running Jenkins as a Different User

2014-12-15 Thread Wt Riker
I pretty much figured this was the case. This is RHEL 6.2. The problem is that by corporate policy, local accounts are not permitted. Vintella is used on all Linux servers so AD users, called "generic" users, must be created to comply with security policy. Therefore that user will not show up i

Re: Running Jenkins as a Different User

2014-12-15 Thread Wt Riker
I just noticed one additional point, and that may be the crux of the problem. Why does it try to use /users/dtvjnkns/.jenkins? That is not the home directory for this user. I specified /var/lib/jenkins as the home directory in /etc/sysconfig/jenkins. -- You received this message because you ar

Re: Running Jenkins as a Different User

2014-12-15 Thread Wt Riker
Thanks for the reply. I have already done all that except trying to run it manually. That did produce some additional errors but it does mean anything to me other than is cannot load Jetty (no idea where that is). I tried to search for it but nothing seemed applicable. Here is the output: Runn

Running Jenkins as a Different User

2014-12-11 Thread Wt Riker
I am trying to set up Jenkins to run as a different user. I followed these instructions: http://blog.manula.org/2013/03/running-jenkins-under-different-user-in.html That seems pretty simple and Jenkins seems to start fine. However, when I try to access it I get this error: HTTP ERROR: 503 Pr