Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7fpg-pp3m-h22f

Опубликовано: 17 мая 2022
Источник: github
Github: Прошло ревью

Описание

Jenkins allows attackers to execute arbitrary jobs

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330.

Пакеты

Наименование

org.jenkins-ci.main:jenkins-core

maven
Затронутые версииВерсия исправления

>= 1.533, < 1.551

1.551

Наименование

org.jenkins-ci.main:jenkins-core

maven
Затронутые версииВерсия исправления

< 1.532.2

1.532.2

EPSS

Процентиль: 18%
0.00056
Низкий

Связанные уязвимости

ubuntu
больше 11 лет назад

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330.

nvd
больше 11 лет назад

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330.

debian
больше 11 лет назад

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows rem ...

EPSS

Процентиль: 18%
0.00056
Низкий