En resumen
- CVE-2018-1000422 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a org.jenkins-ci.plugins:crowd2, crowd2 (atlassian).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.77%, mayor que el 55.7% de las vulnerabilidades.
- Solución: actualizar a 2.0.1 o posterior.
Description
An improper authorization vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java that allows attackers to have Jenkins perform a connection test, connecting to an attacker-specified server with attacker-specified credentials and connection settings.
NVD description
An improper authorization vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java that allows attackers to have Jenkins perform a connection test, connecting to an attacker-specified server with attacker-specified credentials and connection settings.
Más vulnerabilidades de org.jenkins-ci.plugins:crowd2
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free