Lucene search

K
vulnrichmentJenkinsVULNRICHMENT:CVE-2023-41943
HistorySep 06, 2023 - 12:09 p.m.

CVE-2023-41943

2023-09-0612:09:00
jenkins
github.com
jenkins
aws
codecommit
trigger plugin
permission check
http endpoint
sqs queue
security vulnerability

AI Score

6.5

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to clear the SQS queue.

AI Score

6.5

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-41943