Описание
An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.31.1 (включая)
cpe:2.3:a:jenkins:promoted_builds:*:*:*:*:*:jenkins:*:*
EPSS
Процентиль: 8%
0.00031
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-863
Связанные уязвимости
CVSS3: 4.3
redhat
почти 8 лет назад
An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions.
CVSS3: 4.3
github
больше 3 лет назад
Jenkins Promoted Builds Plugin allowed unauthorized users to run some promotion processes
EPSS
Процентиль: 8%
0.00031
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-863