Not rated
CVE-2020-2228 Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting…
Description
Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting in a privilege escalation vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Gitlab Authentication Plugin 1.5 | earliest → 1.5 | No fix stated |
References
- jenkins.io jenkins.io
- [oss-security] 20200715 Multiple vulnerabilities in Jenkins and Jenkins plugins www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Jenkins Gitlab Authentication Plugin
The 6 CVEs of Jenkins Gitlab Authentication Plugin →
CVE-2023-39153
A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Authentication Plugin 1.17.1 and earlier allows…
Not rated
CVE-2022-27206
Jenkins GitLab Authentication Plugin 1.13 and earlier stores the GitLab client secret unencrypted in the global…
Not rated
CVE-2022-25196
Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query…
Not rated
CVE-2019-10371
A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java…
Not rated