Описание
A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in SlaveComputer.java that allows attackers with Overall/Read permission to initiate agent launches, and abort in-progress agent launches.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Enterprise 3 | jenkins | Affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-862
https://bugzilla.redhat.com/show_bug.cgi?id=1609617jenkins: Missing permission check allows users with Overall/Read permission to initiate agent launches
EPSS
Процентиль: 42%
0.002
Низкий
5.3 Medium
CVSS3
Связанные уязвимости
CVSS3: 4.3
nvd
больше 7 лет назад
A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in SlaveComputer.java that allows attackers with Overall/Read permission to initiate agent launches, and abort in-progress agent launches.
CVSS3: 4.3
debian
больше 7 лет назад
A Improper authorization vulnerability exists in Jenkins 2.132 and ear ...
EPSS
Процентиль: 42%
0.002
Низкий
5.3 Medium
CVSS3