Lucene search
GoogleOSV:CVE-2023-27902HistoryMar 10, 2023 - 9:15 p.m.
CVE-2023-27902
2023-03-1021:15:15
Google
osv.dev
11
jenkins
temporary directories
vulnerability
access
item/workspace permission
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
5.1
Confidence
High
EPSS
0.001
Percentile
22.9%
Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows attackers with Item/Workspace permission to access their contents.
Related
github
github
Incorrect Permission Preservation in Jenkins Core
2023-03-10 21:30:19
cve
cve
CVE-2023-27902
2023-03-10 21:15:15
alpinelinux
alpinelinux
CVE-2023-27902
2023-03-10 21:15:00
cvelist
cvelist
CVE-2023-27902
2023-03-08 17:14:51
redhatcve
redhatcve
CVE-2023-27902
2023-03-13 08:43:18
nvd
nvd
CVE-2023-27902
2023-03-10 21:15:15
osv
osv
Incorrect Permission Preservation in Jenkins Core
2023-03-10 21:30:19
BIT-jenkins-2023-27902
2024-03-06 10:56:09
CGA-f846-fggc-qm9g
2024-06-06 12:27:06
prion
prion
Design/Logic Flaw
2023-03-10 21:15:00
cgr
cgr
CVE-2023-27902 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2023-27902 vulnerabilities
2024-09-28 21:12:41
openvas
openvas
Jenkins < 2.375.4 (LTS), < 2.394 Multiple Vulnerabilities - Windows
2023-03-09 00:00:00
Jenkins < 2.375.4 (LTS), < 2.394 Multiple Vulnerabilities - Linux
2023-03-09 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2023-03-08 00:00:00
nessus
nessus
Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.8 Multiple Vulnerabilities (CloudBees Security Advisory 2023-03-08)
2023-03-09 00:00:00
Jenkins LTS < 2.375.4 / Jenkins weekly < 2.394 Multiple Vulnerabilities
2023-03-09 00:00:00
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3299)
2024-04-28 00:00:00
redhat
redhat
(RHSA-2023:3299) Important: jenkins and jenkins-2-plugins security update
2023-05-24 17:06:51
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
5.1
Confidence
High
EPSS
0.001
Percentile
22.9%
Related for OSV:CVE-2023-27902