Описание
Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| jenkins | removed | package |
EPSS
Процентиль: 78%
0.01173
Низкий
Связанные уязвимости
CVSS3: 4.3
redhat
больше 4 лет назад
Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission.
CVSS3: 4.3
nvd
больше 4 лет назад
Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission.
CVSS3: 4.3
github
больше 3 лет назад
Improper permission checks allow canceling queue items and aborting builds in Jenkins
EPSS
Процентиль: 78%
0.01173
Низкий