Arbitrary Code Execution Via Bypassing Permission Check

2017-03-2105:57:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

43.6%

JSON

distfork is vulnerable to arbitrary code execution via bypassing permission check. The bypass is possible because it only performs basic permission (overall/read) checks and allows anyone with that permission to execute arbitrary shell commands on all connected nodes.

CPENameOperatorVersion
hudson distributed fork pluginle1.1

CPE	Name	Operator	Version
	hudson distributed fork plugin	le	1.1

References

seclists.org/oss-sec/2017/q1/656

www.securityfocus.com/bid/96980

jenkins.io/security/advisory/2017-03-20/

0.001 Low

EPSS

Percentile

43.6%

JSON

Related for VERACODE:3705