Authentication flaw

2017-10-0501:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

21.7%

JSON

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.

CPENameOperatorVersion
parameterized_triggereq1.0
parameterized_triggereq1.1
parameterized_triggereq1.2
parameterized_triggereq1.3
parameterized_triggereq1.4
parameterized_triggereq1.5
parameterized_triggereq1.6
parameterized_triggereq2.0
parameterized_triggereq2.1
parameterized_triggereq2.2

Name	Operator	Version
parameterized_trigger	eq	1.0
parameterized_trigger	eq	1.1
parameterized_trigger	eq	1.2
parameterized_trigger	eq	1.3
parameterized_trigger	eq	1.4
parameterized_trigger	eq	1.5
parameterized_trigger	eq	1.6
parameterized_trigger	eq	2.0
parameterized_trigger	eq	2.1
parameterized_trigger	eq	2.2

Rows per page:

1-10 of 421

References

jenkins.io/security/advisory/2017-07-10/

0.001 Low

EPSS

Percentile

21.7%

JSON

Related for PRION:CVE-2017-1000084