Missing Authorization in Jenkins Blue Ocean Plugin

2022-05-1301:18:20

Google

osv.dev

0.001 Low

EPSS

Percentile

25.9%

JSON

The optional Run/Artifacts permission can be enabled by setting a Java system property. Blue Ocean did not check this permission before providing access to archived artifacts, Item/Read permission was sufficient.

CPENameOperatorVersion
io.jenkins.blueocean:blueoceaneq1.0.0-b07
io.jenkins.blueocean:blueoceaneq1.0.0-b14
io.jenkins.blueocean:blueoceaneq1.0.0-b22
io.jenkins.blueocean:blueoceaneq1.1.1
io.jenkins.blueocean:blueoceaneq1.1.0-beta-1
io.jenkins.blueocean:blueoceaneq1.2.0-beta-6
io.jenkins.blueocean:blueoceaneq1.0.0-b21-beta-1
io.jenkins.blueocean:blueoceaneq1.2.0-beta-7
io.jenkins.blueocean:blueoceaneq1.0.0-b01
io.jenkins.blueocean:blueoceaneq1.0.0-b12

Name	Operator	Version
io.jenkins.blueocean:blueocean	eq	1.0.0-b07
io.jenkins.blueocean:blueocean	eq	1.0.0-b14
io.jenkins.blueocean:blueocean	eq	1.0.0-b22
io.jenkins.blueocean:blueocean	eq	1.1.1
io.jenkins.blueocean:blueocean	eq	1.1.0-beta-1
io.jenkins.blueocean:blueocean	eq	1.2.0-beta-6
io.jenkins.blueocean:blueocean	eq	1.0.0-b21-beta-1
io.jenkins.blueocean:blueocean	eq	1.2.0-beta-7
io.jenkins.blueocean:blueocean	eq	1.0.0-b01
io.jenkins.blueocean:blueocean	eq	1.0.0-b12