8.8
High
CVE-2023-41939 Jenkins SSH2 Easy Plugin 1.4 and earlier does not verify that permissions configured to be granted are enabled,…
Description
Jenkins SSH2 Easy Plugin 1.4 and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins SSH2 Easy Plugin 1.4 | earliest → 1.4 | No fix stated |
References
- Jenkins Security Advisory 2023-09-06 www.jenkins.io
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified