Description
Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions even after they've been disabled.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9Attack Vector: Network
Complexity: Low
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High
Affected Packages3 packages
🔴Vulnerability Details
3OSVJenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled↗2023-04-02 GHSAJenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled↗2023-04-02 CVEListCVE-2023-28668: Jenkins Role-based Authorization Strategy Plugin 587↗2023-03-23 📋Vendor Advisories
1JenkinsJenkins Security Advisory 2023-03-21↗2023-03-21