Skip to content
Sign in
4.3 Medium

CVE-2023-3315 Missing permission checks in Jenkins Team Concert Plugin 2.4.1 and earlier allow attackers with Overall/Read…

Description

Missing permission checks in Jenkins Team Concert Plugin 2.4.1 and earlier allow attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins Team Concert Plugin 2.4 earliest → 2.4.1 No fix stated

Other CVEs of Jenkins Team Concert Plugin

The 4 CVEs of Jenkins Team Concert Plugin →
CVE-2019-16567 A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier in form-related methods allowed users with… Not rated CVE-2019-16565 A cross-site request forgery vulnerability in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers to… Not rated CVE-2019-16566 A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers with Overall/Read… Not rated
Track this CVE