PT-2019-11803 · Jenkins · Jenkins Project Inheritance Plugin+1

Wadeck Follonier

·

CVE-2019-10409

·

Publicado

2019-09-25

·

Atualizado

2023-10-25

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Jenkins Project Inheritance Plugin versions 2.0.0 and earlier Jenkins Project Inheritance Plugin versions 19.08.01 and earlier
Description A missing permission check in the Jenkins Project Inheritance Plugin allowed attackers with Overall/Read permission to trigger project generation from templates.
Recommendations For versions 2.0.0 and earlier, update to a version that includes the missing permission check to prevent unauthorized project generation. For versions 19.08.01 and earlier, update to a version that includes the missing permission check to prevent unauthorized project generation.

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2019-10409
GHSA-GPMW-H4WQ-4RCH

Produtos afetados

Jenkins
Jenkins Project Inheritance Plugin