Improper Authorization

2024-03-1207:40:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

improper authorization

jenkins

docker build

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

org.jenkins-ci.plugins:docker-build-step is vulnerable to Improper Authorization. The vulnerability is due to inadequate permission validation, allowing attackers with Overall/Read permission to connect to attacker-specified TCP or Unix socket URLs and reconfigure the plugin using provided connection test parameters, affecting future build step executions.

CPENameOperatorVersion
docker-build-steple2.11
docker-build-steple2.11

CPE	Name	Operator	Version
	docker-build-step	le	2.11
	docker-build-step	le	2.11

References

www.openwall.com/lists/oss-security/2024/03/06/3

www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3200