Lucene search
PRIOn knowledge basePRION:CVE-2023-41943HistorySep 06, 2023 - 1:15 p.m.
Design/Logic Flaw
2023-09-0613:15:00
PRIOn knowledge base
www.prio-n.com
6
jenkins
aws
codecommit
trigger
plugin
permission check
http endpoint
attackers
sqs queue
nvd
0.0004 Low
EPSS
Percentile
13.4%
Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to clear the SQS queue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| aws_codecommit_trigger | le | 3.0.12 |
Related
osv
osv
Missing permission check in Jenkins AWS CodeCommit Trigger Plugin
2023-09-06 15:30:26
github
github
Missing permission check in Jenkins AWS CodeCommit Trigger Plugin
2023-09-06 15:30:26
alpinelinux
alpinelinux
CVE-2023-41943
2023-09-06 13:15:11
cve
cve
CVE-2023-41943
2023-09-06 13:15:11
cvelist
cvelist
CVE-2023-41943
2023-09-06 12:09:00
nvd
nvd
CVE-2023-41943
2023-09-06 13:15:11
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-09-06)
2023-09-07 00:00:00