Se connecter

9.8 Critique

CVE-2023-28668 Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions even after they've…

Description

Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions even after they've been disabled.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins Role-based Authorization Strategy Plugin	Versions non publiées

Les 3 CVE de Jenkins Role-based Authorization Strategy Plugin →

CVE-2021-21624 An incorrect permission check in Jenkins Role-based Authorization Strategy Plugin 3.1 and earlier allows attackers… Non notée CVE-2020-2286 Jenkins Role-based Authorization Strategy Plugin 3.0 and earlier does not properly invalidate a permission cache when… Non notée

Vous utilisez Jenkins Role-based Authorization Strategy Plugin ?

Suivre cette CVE Surveiller Jenkins Role-based Authorization Strategy Plugin Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2023-28668

Chronologie

Publiée 23 mars 2023
Dernière modification 25 février 2025

Références

Jenkins Security Advisory 2023-03-21 www.jenkins.io

Suivre cette CVE