Lucene search

K
osvGoogleOSV:GHSA-98M4-M2C3-QXGQ
HistoryMay 24, 2022 - 5:01 p.m.

Jenkins JIRA Plugin allows users to select and use credentials with System scope

2022-05-2417:01:40
Google
osv.dev
12
jenkins
jira
plugin
credentials
scope
issue

EPSS

0.001

Percentile

42.8%

Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use credentials with System scope. Jira Plugin 3.0.11 defines the appropriate folder context for credential lookup. As a side effect, existing per-folder Jira sites may lose access to already configured System-scoped credentials, as if no credential was specified in the first place.

EPSS

0.001

Percentile

42.8%