Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-28668 EUVD-2023-1178GHSA-436g-2f92-cvhh

Jenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled

Published Mar 23, 2023 · Updated Feb 25, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Role-based Authorization Strategy Plugin Package: org.jenkins-ci.plugins:role-strategy Category: Web / CMS Ecosystem: Maven

Description

Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions even after they've been disabled.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins Role-based Authorization Strategy Plugin ≤ 587.v2872c41fa_e51 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:role-strategy < 587.588.v850a_20a_30162 587.588.v850a_20a_30162 GHSA-436g-2f92-cvhh

Advisories 1

References