GHSA-9rx5-w522-5fh7

ghsaUSosv

Jenkins Promoted Builds Plugin allowed unauthorized users to run some promotion processes

view advisory published 2022-05-13Licence: CC-BY-4.0

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-1000114US	medium4.3OT elevated	0.63% (50th)	—	2018-03-13
An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access…

references

External citations — patches, advisories, analysis.

https://jenkins.io/security/advisory/2018-02-26/#SECURITY-746WEB
https://nvd.nist.gov/vuln/detail/CVE-2018-1000114ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan