CVE-2021-21624: Jenkins project Jenkins Role-based Authorization

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Описание

Оригинално описание

An incorrect permission check in Jenkins Role-based Authorization Strategy Plugin 3.1 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.

Засегнати продукти

Jenkins project Jenkins Role-based Authorization Strategy Plugin: unspecified до 3.1

История

18 март 2021 Публикувано

Други уязвимости в Jenkins project Jenkins Role-based Authorization Strategy Plugin

9.8CVE-2023-28668
CVE-2020-2286

Първоизточници

https://www.cve.org/CVERecord?id=CVE-2021-21624
https://nvd.nist.gov/vuln/detail/CVE-2021-21624
https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2182
http://www.openwall.com/lists/oss-security/2021/03/18/5