Authorization

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

CVE-2018-1000114

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

CVE-2018-1000114

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

org.jenkins-ci.plugins:buildgraph-view (>=1.3.1, <=1.8) potentially affected by CVE-2018-1000114 via org.jenkins-ci.plugins:promoted-builds (2.17)

org.jenkins-ci.plugins:promoted-builds MAVEN version 2.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:promoted-builds and may be impacted: - org.jenkins-ci.plugins:buildgraph-view =1.3.1, =1.8 Source cves: CVE-2018-1000114...

CVE-2018-1000114

CVE-2018-1000114 affects Jenkins Promoted Builds Plugin 2.31.1 and earlier. The vulnerability arises from improper authorization in Status.java and ManualCondition.java, enabling an attacker who has read access to jobs to perform promotions. Supported by multiple feeds (GHSA, OSV, CNVD, Red Hat, ...

CVE-2018-1000114

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

CVE-2018-1000114: Incorrect Authorization

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

PT-2018-9293

Name of the Vulnerable Software and Affected Versions: Jenkins Promoted Builds Plugin versions 2.31.1 and earlier Description: An improper authorization issue exists that allows an attacker with read access to jobs to perform promotions. This is due to vulnerabilities in Status.java and...

CVE-2018-1000114

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions...

Discuz! Underworld career plugin injection vulnerability-vulnerability warning-the black bar safety net

Plugin version: 2.2 2.5 Register a forum ID IE submit the following code blackband. php? mode=yule&action=enjoy&id=2 and 1=2 union select 1,0x2D312C67726F757069643D312C61646d696e69643d31,3,4/ Promoted to administrator discuz7. 0. 0 background to give webshell method If it is discuz6. 0 the...