CVE-2017-1000105

2017-10-0501:29:04

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON

The optional Run/Artifacts permission can be enabled by setting a Java system property. Blue Ocean did not check this permission before providing access to archived artifacts, Item/Read permission was sufficient.

CPENameOperatorVersion
blueocean-plugineqblueocean-parent-1.0.0-b21
blueocean-plugineqblueocean-parent-1.1.0-beta-5
blueocean-plugineqblueocean-parent-1.0-alpha-8
blueocean-plugineqblueocean-parent-1.1.0-beta-7
blueocean-plugineqblueocean-parent-1.0.0-b25
blueocean-plugineqblueocean-parent-1.0.0-rc1
blueocean-plugineqblueocean-parent-1.0.0-b18
blueocean-plugineqblueocean-parent-1.0-alpha-3
blueocean-plugineqblueocean-parent-1.0.0-b14
blueocean-plugineqblueocean-parent-1.0.0-b19

Name	Operator	Version
blueocean-plugin	eq	blueocean-parent-1.0.0-b21
blueocean-plugin	eq	blueocean-parent-1.1.0-beta-5
blueocean-plugin	eq	blueocean-parent-1.0-alpha-8
blueocean-plugin	eq	blueocean-parent-1.1.0-beta-7
blueocean-plugin	eq	blueocean-parent-1.0.0-b25
blueocean-plugin	eq	blueocean-parent-1.0.0-rc1
blueocean-plugin	eq	blueocean-parent-1.0.0-b18
blueocean-plugin	eq	blueocean-parent-1.0-alpha-3
blueocean-plugin	eq	blueocean-parent-1.0.0-b14
blueocean-plugin	eq	blueocean-parent-1.0.0-b19