Non notée
CVE-2021-21623 An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with…
Description
An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Matrix Authorization Strategy Plugin 2.6 | premières → 2.6.5 | 2.6.3.1 |
| Jenkins Matrix Authorization Strategy Plugin 2.5 | premières → < 2.5.2 | 2.5.2 |