Jenkins Role-based Authorization Strategy Plugin

1 result · Clear filters · Feed

• Medium 4.3
  CVE-2021-21624

  Incorrect permission checks in Jenkins Role-based Authorization Strategy Plugin may allow accessing some items

  An incorrect permission check in Jenkins Role-based Authorization Strategy Plugin 3.1 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.

  Jenkins Project Jenkins Role-based Authorization Strategy Plugin org.jenkins-ci.plugins:role-strategy Web / CMS Maven
  Mar 18, 2021