Описание
Missing permission checks in AWS Credentials Plugin
A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.
Пакеты
Наименование
org.jenkins-ci.plugins:aws-credentials
maven
Затронутые версииВерсия исправления
<= 189.v3551d5642995
191.vcb_f183ce58b_9
Связанные уязвимости
CVSS3: 4.3
nvd
почти 4 года назад
A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.