Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8jx9-7j5m-79x4

Опубликовано: 13 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 5.3

Описание

Jenkins Build Step Plugin fails to check Item/Build permission

Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. The Pipeline: Build Step Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.

Пакеты

Наименование

org.jenkins-ci.plugins:pipeline-build-step

maven
Затронутые версииВерсия исправления

<= 2.5

2.5.1

EPSS

Процентиль: 9%
0.00031
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 3.7
redhat
больше 8 лет назад

Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. The Pipeline: Build Step Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.

CVSS3: 5.3
nvd
больше 8 лет назад

Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. The Pipeline: Build Step Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.

EPSS

Процентиль: 9%
0.00031
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-276