En resumen
- CVE-2018-1000107 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a com.synopsys.jenkinsci:ownership, job and node ownership (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.69%, mayor que el 52.8% de las vulnerabilidades.
- Solución: actualizar a 0.12.0 o posterior.
Description
An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in
OwnershipDescription.java,
JobOwnerJobProperty.java,
and OwnerNodeProperty.java
that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.
NVD description
An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java, JobOwnerJobProperty.java, and OwnerNodeProperty.java that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.
Más vulnerabilidades de com.synopsys.jenkinsci:ownership
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free