Skip to content
6.5 Medium

CVE-2024-34146 Jenkins Git server Plugin 114.v068a_c7cc2574 and earlier does not perform a permission check for read access to a Git…

Description

Jenkins Git server Plugin 114.v068a_c7cc2574 and earlier does not perform a permission check for read access to a Git repository over SSH, allowing attackers with a previously configured SSH public key but lacking Overall/Read permission to access these repositories.

Affected products and versions

Product Affected versions Fixed in
Jenkins Git server Plugin Versions not published
git_server Versions not published
The 2 CVEs of Jenkins Git server Plugin →
Track this CVE