CVE-2020-2286: Jenkins project Jenkins Role-based Authorization

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Описание

Оригинално описание

Jenkins Role-based Authorization Strategy Plugin 3.0 and earlier does not properly invalidate a permission cache when the configuration is changed, resulting in permissions being granted based on an outdated configuration.

Засегнати продукти

Jenkins project Jenkins Role-based Authorization Strategy Plugin: 2.12 преди unspecified; unspecified до 3.0

История

8 октомври 2020 Публикувано

Други уязвимости в Jenkins project Jenkins Role-based Authorization Strategy Plugin

9.8CVE-2023-28668
CVE-2021-21624

Първоизточници

https://www.cve.org/CVERecord?id=CVE-2020-2286
https://nvd.nist.gov/vuln/detail/CVE-2020-2286
https://www.jenkins.io/security/advisory/2020-10-08/#SECURITY-1767
http://www.openwall.com/lists/oss-security/2020/10/08/5