| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:deployer-framework | < 86.v7b_a_4a_55b_f3ec | 86.v7b_a_4a_55b_f3ec |
| deployer framework | ≤ 85.v1d1888e8c021 |
Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not perform a permission check in an HTTP endpoint.
This allows attackers with Item/Read permission to read deployment logs.
Deployer Framework Plugin 86.v7b_a_4a_55b_f3ec requires Deploy Now/Deploy permission to read deployment logs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free