Lucene search
GoogleOSV:GHSA-5HW2-327V-VVR6HistoryMay 24, 2022 - 5:29 p.m.
Missing permission check in Jenkins Implied Labels Plugin allows reconfiguring the plugin
2022-05-2417:29:16
Google
osv.dev
12
jenkins
implied labels
plugin
permission
check
http
endpoint
attackers
overall/administer
EPSS
0.001
Percentile
22.0%
Implied Labels Plugin 0.6 and earlier does not perform a permission check in an HTTP endpoint.
This allows attackers with Overall/Read permission to configure the plugin.
Implied Labels Plugin 0.7 requires Overall/Administer permission to configure the plugin.
Related
osv
osv
CVE-2020-2282
2020-09-23 14:15:13
github
github
cve
cve
CVE-2020-2282
2020-09-23 14:15:13
prion
prion
Design/Logic Flaw
2020-09-23 14:15:00
cvelist
cvelist
CVE-2020-2282
2020-09-23 13:10:19
nvd
nvd
CVE-2020-2282
2020-09-23 14:15:13