Lucene search

Veracode Vulnerability DatabaseVERACODE:46804

HistoryMay 08, 2024 - 7:16 a.m.

Improper Authorization

2024-05-0807:16:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

git-server

vulnerability

permission

git

ssh

access

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON

org.jenkins-ci.plugins: git-server is vulnerable to Improper Authorization. The vulnerability is due to improper permission checks for read access to a Git repository over SSH. This allows attackers with a previously configured SSH public key but lacking Overall/Read permission to access Git repositories.

CPENameOperatorVersion
jenkins git server pluginle114.v068a_c7cc2574
jenkins git server pluginle114.v068a_c7cc2574

CPE	Name	Operator	Version
	jenkins git server plugin	le	114.v068a_c7cc2574
	jenkins git server plugin	le	114.v068a_c7cc2574

References

www.openwall.com/lists/oss-security/2024/05/02/3

github.com/advisories/GHSA-xh9c-vcf9-h94m

www.jenkins.io/security/advisory/2024-05-02/#SECURITY-3342