Insufficient Permission Check

2022-07-2719:05:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.012 Low

EPSS

Percentile

84.9%

JSON

Jenkins git plugin is vulnerable to an insufficient permission check. An unauthenticated attacker can trigger builds to a malicious GIT repository, changing the job configuration.

CPENameOperatorVersion
jenkins-2-pluginseq4.7.1621361158__1.el8
jenkins-2-pluginseq4.7.1637600997__1.el8
jenkins-2-pluginseq4.8.1643649345__1.el8
jenkins-2-pluginseq4.9.1647580879__1.el8
jenkins-2-pluginseq4.10.1667207005__1.el8
jenkins-2-pluginseq4.9.1644822177__1.el8
jenkins-2-pluginseq4.10.1663599478__1.el8
jenkins-2-pluginseq4.10.1663147786__1.el8
jenkins-2-pluginseq4.10.1647505461__1.el8
jenkins-2-pluginseq4.8.1637599935__1.el8

Name	Operator	Version
jenkins-2-plugins	eq	4.7.1621361158__1.el8
jenkins-2-plugins	eq	4.7.1637600997__1.el8
jenkins-2-plugins	eq	4.8.1643649345__1.el8
jenkins-2-plugins	eq	4.9.1647580879__1.el8
jenkins-2-plugins	eq	4.10.1667207005__1.el8
jenkins-2-plugins	eq	4.9.1644822177__1.el8
jenkins-2-plugins	eq	4.10.1663599478__1.el8
jenkins-2-plugins	eq	4.10.1663147786__1.el8
jenkins-2-plugins	eq	4.10.1647505461__1.el8
jenkins-2-plugins	eq	4.8.1637599935__1.el8

Rows per page:

1-10 of 491

References

www.openwall.com/lists/oss-security/2022/07/27/1

github.com/jenkinsci/git-plugin/commit/b46165c74a0bf15e08763de2e506005624d5d238#diff-8262e5a8a33779fafa29d54ac426cbf6c32acdce19ff314d27363652cf8729d0R118-R136

www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284