Improper authorization vulnerability in Jenkins Mesos Plugin

2022-05-1301:48:37

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.6%

JSON

An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.

CPENameOperatorVersion
org.jenkins-ci.plugins:mesoseq0.4.0
org.jenkins-ci.plugins:mesoseq0.13.1
org.jenkins-ci.plugins:mesoseq0.17.1
org.jenkins-ci.plugins:mesoseq0.5.0
org.jenkins-ci.plugins:mesoseq0.6.0
org.jenkins-ci.plugins:mesoseq0.7.0
org.jenkins-ci.plugins:mesoseq0.2.0
org.jenkins-ci.plugins:mesoseq0.10.0-beta-1
org.jenkins-ci.plugins:mesoseq0.10.0-beta-4
org.jenkins-ci.plugins:mesoseq0.13.0

Name	Operator	Version
org.jenkins-ci.plugins:mesos	eq	0.4.0
org.jenkins-ci.plugins:mesos	eq	0.13.1
org.jenkins-ci.plugins:mesos	eq	0.17.1
org.jenkins-ci.plugins:mesos	eq	0.5.0
org.jenkins-ci.plugins:mesos	eq	0.6.0
org.jenkins-ci.plugins:mesos	eq	0.7.0
org.jenkins-ci.plugins:mesos	eq	0.2.0
org.jenkins-ci.plugins:mesos	eq	0.10.0-beta-1
org.jenkins-ci.plugins:mesos	eq	0.10.0-beta-4
org.jenkins-ci.plugins:mesos	eq	0.13.0