CVE-2023-28668

2023-03-2311:25:59

jenkins

www.cve.org

cve-2023-28668

jenkins role-based authorization

permission granting

plugin 587.v2872c41fa_e51

disabled permissions

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions even after they’ve been disabled.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Jenkins Role-based Authorization Strategy Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThanOrEqual": "587.v2872c41fa_e51",
        "status": "affected",
        "version": "0",
        "versionType": "maven"
      }
    ]
  }
]