Design/Logic Flaw

2013-11-2519:55:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.4%

JSON

The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.

CPENameOperatorVersion
exclusioneq0.7
exclusioneq0.6
exclusionle0.8

Name	Operator	Version
exclusion	eq	0.7
exclusion	eq	0.6
exclusion	le	0.8

References

wiki.jenkins-ci.org/display/JENKINS/Exclusion-Plugin

wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20