Description

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.

Remediation

References

https://jenkins.io/security/advisory/2017-07-10/

Related Vulnerabilities

CVE-2023-33948 Vulnerability in maven package com.liferay.portal:release.portal.bom

CVE-2021-40146 Vulnerability in maven package org.apache.any23:apache-any23-core

CVE-2022-34201 Vulnerability in maven package com.convertigo.jenkins.plugins:convertigo-mobile-platform

CVE-2023-24434 Vulnerability in maven package org.jenkins-ci.plugins:ghprb

CVE-2015-3191 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-login

Severity

High

Classification

CWE-276 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Vendor Advisory