Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-2142 EUVD-2022-3741GHSA-f9v6-p7hp-c3qx

Missing permission checks in Jenkins P4 Plugin

Published Mar 9, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins P4 Plugin Package: org.jenkins-ci.plugins:p4 Category: Web / CMS Ecosystem: Maven

Description

A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins P4 Plugin unspecified – ≤ 1.10.10 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:p4 < 1.10.11 1.10.11 GHSA-f9v6-p7hp-c3qx

References