Lucene search

K
osvGoogleOSV:GHSA-CRVQ-MW2W-4CFX
HistoryMay 13, 2022 - 1:48 a.m.

Jenkins Black Duck Hub Plugin allowed any user with Overall/Read to read and write its configuration

2022-05-1301:48:34
Google
osv.dev
7
jenkins
black duck hub plugin
vulnerability
configuration
authorization

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

28.4%

An improper authorization vulnerability exists in Jenkins Black Duck Hub Plugin 3.0.3 and older in PostBuildScanDescriptor.java that allows users with Overall/Read permission to read and write the Black Duck Hub plugin configuration.

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

28.4%

Related for OSV:GHSA-CRVQ-MW2W-4CFX