Information Disclosure

2019-09-0500:17:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

45.8%

JSON

jenkins-2-plugins is vulnerable to information disclosure. Missing permission checks in the Pipeline: Shared Groovy Libraries plugin enables an attacker to obtain confidential information about the contents of the SCM repositories that are referenced by global libraries.

CPENameOperatorVersion
jenkins-2-pluginseq4.1.1561471763__1.el7
jenkins-2-pluginseq3.11.1553788831__1.el7
jenkins-2-pluginseq3.11.1542061886__1.el7
jenkins-2-pluginseq3.11.1535566135__1.el7
jenkins-2-pluginseq3.11.1560870549__1.el7
jenkins-2-pluginseq3.7.1527795978__1.el7
jenkins-2-pluginseq3.10.1525788236__1.el7
jenkins-2-pluginseq3.11.1549642489__1.el7
jenkins-2-pluginseq3.7.1510081324__1.el7
jenkins-2-pluginseq3.11.1539805268__1.el7

Name	Operator	Version
jenkins-2-plugins	eq	4.1.1561471763__1.el7
jenkins-2-plugins	eq	3.11.1553788831__1.el7
jenkins-2-plugins	eq	3.11.1542061886__1.el7
jenkins-2-plugins	eq	3.11.1535566135__1.el7
jenkins-2-plugins	eq	3.11.1560870549__1.el7
jenkins-2-plugins	eq	3.7.1527795978__1.el7
jenkins-2-plugins	eq	3.10.1525788236__1.el7
jenkins-2-plugins	eq	3.11.1549642489__1.el7
jenkins-2-plugins	eq	3.7.1510081324__1.el7
jenkins-2-plugins	eq	3.11.1539805268__1.el7