Lucene search

K
osvGoogleOSV:GHSA-RCRV-6R7R-RR7M
HistoryMay 13, 2022 - 1:17 a.m.

Missing permission check in Jenkins FTP publisher Plugin

2022-05-1301:17:45
Google
osv.dev
6
jenkins
ftp publisher
permission check
security vulnerability
overall/read permission
ftp connection

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

44.8%

A missing permission check in Jenkins FTP publisher Plugin in the FTPPublisher.DescriptorImpl#doLoginCheck method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

44.8%

Related for OSV:GHSA-RCRV-6R7R-RR7M