Lucene search

K
osvGoogleOSV:GHSA-R5R6-V8QH-PMPQ
HistoryMar 30, 2022 - 12:00 a.m.

Missing permission checks in Jekins Bitbucket Server Integration Plugin

2022-03-3000:00:25
Google
osv.dev
10
jenkins
bitbucket
integration plugin
permission checks
http endpoints
attackers
overall/read permission
security vulnerability

EPSS

0.001

Percentile

22.0%

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers.

EPSS

0.001

Percentile

22.0%