Описание
Missing permission check in Jenkins Project Inheritance Plugin
A missing permission check in Jenkins Project Inheritance Plugin 19.08.01 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates.
Пакеты
Наименование
hudson.plugins:project-inheritance
maven
Затронутые версииВерсия исправления
< 19.08.02
19.08.02
Связанные уязвимости
CVSS3: 4.3
nvd
больше 6 лет назад
A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates.