Missing Authorization in Jenkins Pipeline: Shared Groovy Libraries Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2019-10357 · ADVISORY
• jenkinsci/workflow-cps-global-lib-plugin commit 6fce1e2 · WEB
• access.redhat.com/errata/RHSA-2019:2594 · WEB
• access.redhat.com/errata/RHSA-2019:2651 · WEB
• access.redhat.com/errata/RHSA-2019:2662 · WEB
• jenkinsci/workflow-cps-global-lib-plugin · PACKAGE
• jenkins.io/security/advisory/2019-07-31 · WEB
• openwall.com/lists/oss-security/2019/07/31/1 · WEB

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib のその他の脆弱性

• CVE-2022-43406緊急 9.9A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers with …
• CVE-2022-43405緊急 9.9A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission …
• CVE-2022-29047中 5.3Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull reque…
• CVE-2022-25183高 8.8Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache director…
• CVE-2022-25182高 8.8A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/…