Improper authorization control for web services In org.jenkins-ci.main:jenkins-core
Description
Jenkins allows attackers to execute arbitrary jobs BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 1.551, 1.532.2 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.