com.btc.ep:btc-embeddedplatform (>=1.9.2-beta <=2.5.9), com.mig82:folder-properties (>=57.vde5161ec7a_b_a_ <=61.vc6d404b_75d60) +55 more potentially affected by CVE-2018-1000015 via org.jenkins-ci.plugins.workflow:workflow-durable-task-step (>=0.1-beta-1 <=2.14)

org.jenkins-ci.plugins.workflow:workflow-durable-task-step MAVEN version =0.1-beta-1, =1.9.2-beta, =57.vde5161ec7aba, =1.3.0, =1.1.0.825.v30618768da42, =1.0-alpha-2, =1.27.17, =1.0-alpha-2, =1.0-alpha-2, =1.0.0, =1.0.0, =1.0-alpha-8, =1.0-alpha-4, =0.2.0, =1.0-alpha-2, =28.v4f731c96b5f9,...

CVE-2018-1000015

On Jenkins instances with Authorize Project plugin, the authentication associated with a build may lack the Computer/Build permission on some agents. This did not prevent the execution of Pipeline node blocks on those agents due to incorrect permissions checks in Pipeline: Nodes and Processes...

CVE-2018-1000015

CVE-2018-1000015 affects Jenkins with the Authorize Project plugin where authentication for a build may lack Computer/Build permission on some agents. The vulnerability arises from incorrect permission checks in Pipeline: Nodes and Processes plugin versions 2.17 and earlier, which allowed executi...