Aller au contenu
Se connecter
Non notée

CVE-2021-21647 Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing…

Description

Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins CloudBees CD Plugin 1.1 premières → 1.1.21 1.1.18.1

Autres CVE de Jenkins CloudBees CD Plugin

Les 3 CVE de Jenkins CloudBees CD Plugin →
CVE-2023-46655 Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which… Non notée CVE-2023-46654 Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory… Non notée
Suivre cette CVE