Описание
Jenkins Role-based Authorization Strategy Plugin 3.0 and earlier does not properly invalidate a permission cache when the configuration is changed, resulting in permissions being granted based on an outdated configuration.
Ссылки
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.0 (включая)
cpe:2.3:a:jenkins:role-based_authorization_strategy:*:*:*:*:*:jenkins:*:*
EPSS
Процентиль: 28%
0.001
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
Improper authorization due to caching in Jenkins Role-based Authorization Strategy Plugin
EPSS
Процентиль: 28%
0.001
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2