Description

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.

Remediation

References

https://jenkins.io/security/advisory/2017-07-10/

Related Vulnerabilities

CVE-2023-50721 Vulnerability in maven package org.xwiki.platform:xwiki-platform-search-ui

CVE-2023-32261 Vulnerability in maven package org.jenkins-ci.plugins:dimensionsscm

CVE-2020-27885 Vulnerability in maven package org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.store.feature

CVE-2014-3612 Vulnerability in maven package org.apache.activemq:activemq-jaas

CVE-2019-1003055 Vulnerability in maven package org.jvnet.hudson.plugins:ftppublisher

Severity

High

Classification

CWE-276 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Vendor Advisory