En bref
- CVE-2018-1000107 est une vulnérabilité MOYENNE (CVSS 6.5) touchant com.synopsys.jenkinsci:ownership, job and node ownership (jenkins).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.69%, plus élevée que 52.8% des vulnérabilités.
- Correctif : mettre à jour vers 0.12.0 ou plus récent.
Description
An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in
OwnershipDescription.java,
JobOwnerJobProperty.java,
and OwnerNodeProperty.java
that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.
NVD description
An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java, JobOwnerJobProperty.java, and OwnerNodeProperty.java that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.
Autres vulnérabilités de com.synopsys.jenkinsci:ownership
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free