Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-41943HistorySep 06, 2023 - 1:15 p.m.
CVE-2023-41943
2023-09-0613:15:11
Alpine Linux Development Team
security.alpinelinux.org
6
jenkins
aws codecommit
permission check
http endpoint
sqs queue
security vulnerability
cve-2023-41943
unix
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
13.2%
Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to clear the SQS queue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | jenkins | = 2.387.3-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | jenkins | = 2.440.3-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
| Alpine | edge-community | noarch | jenkins | = 2.452.2-r0 | UNKNOWN |
Related
osv
osv
Missing permission check in Jenkins AWS CodeCommit Trigger Plugin
2023-09-06 15:30:26
github
github
Missing permission check in Jenkins AWS CodeCommit Trigger Plugin
2023-09-06 15:30:26
cve
cve
CVE-2023-41943
2023-09-06 13:15:11
prion
prion
Design/Logic Flaw
2023-09-06 13:15:00
cvelist
cvelist
CVE-2023-41943
2023-09-06 12:09:00
nvd
nvd
CVE-2023-41943
2023-09-06 13:15:11
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-09-06)
2023-09-07 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
13.2%
Related for ALPINE:CVE-2023-41943