Описание
A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Queue.java that allows attackers with Overall/Read permission to cancel queued builds.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Enterprise 3 | jenkins | Affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-862
https://bugzilla.redhat.com/show_bug.cgi?id=1609615jenkins: Missing permission check allows users with Overall/Read permission to cancel queued builds
EPSS
Процентиль: 52%
0.00759
Низкий
4.6 Medium
CVSS3
Связанные уязвимости
CVSS3: 4.3
nvd
около 8 лет назад
A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Queue.java that allows attackers with Overall/Read permission to cancel queued builds.
CVSS3: 4.3
debian
около 8 лет назад
A Improper authorization vulnerability exists in Jenkins 2.132 and ear ...
EPSS
Процентиль: 52%
0.00759
Низкий
4.6 Medium
CVSS3