Missing permission checks in Jenkins P4 Plugin

🗓️ 24 May 2022 17:28:10Reported by GitHub Advisory DatabaseType

Missing permission checks in Jenkins P4 Plugin allowing unauthorized builds and label

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2020-2142	9 Mar 202016:15	–	cve
NVD	CVE-2020-2142	9 Mar 202016:15	–	nvd
Prion	Information disclosure	9 Mar 202016:15	–	prion
OSV	Missing permission checks in Jenkins P4 Plugin	24 May 202217:10	–	osv
Cvelist	CVE-2020-2142	9 Mar 202015:00	–	cvelist

Vulners

Node

org.jenkins-ci.plugins p4Range<1.10.11

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-2142
jenkins	www.jenkins.io/security/advisory/2020-03-09/
openwall	www.openwall.com/lists/oss-security/2020/03/09/1
github	www.github.com/jenkinsci/p4-plugin/commit/2f2a31d8d36de7abab45820fab3a82f4c682b760
github	www.github.com/advisories/GHSA-f9v6-p7hp-c3qx

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2022 17:10Current

4.9Medium risk

Vulners AI Score4.9

EPSS0.001

jenkins p4 plugin permission checks overall/read permission http endpoints