Missing permission check in Jenkins Support Core Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2019-16539 · ADVISORY
• jenkinsci/support-core-plugin commit 6b177ea · WEB
• jenkinsci/support-core-plugin · WEB
• jenkins.io/security/advisory/2019-11-21 · WEB
• openwall.com/lists/oss-security/2019/11/21/1 · WEB

org.jenkins-ci.plugins:support-core のその他の脆弱性

• CVE-2022-45383中 6.5An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle p…
• CVE-2022-25187中 6.5Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.
• CVE-2021-21621中 5.3Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the "About user (basic authentication de…
• CVE-2019-16540中 6.5A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbit…