CVE-2017-1000084 Parameterized Trigger Plugin fails to check Item/Build permission
MediumCVSS 6.5
EPSS 0.78%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | < 2.35.1 | 2.35.1 |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.10 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.11 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.12 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.13 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.14 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.15 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.16 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.17 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.18 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.19 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.20 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.21 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.22 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.23 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.24 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.25 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.26 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.27 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.28 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.29 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.30 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.31 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.32 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.33 | No fix listed |
Show 49 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.34 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.35 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.5 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.6 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.7 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.8 | No fix listed |
| org.jenkins-ci.plugins/parameterized-trigger(Maven) | = 2.9 | No fix listed |
| jenkins parameterized trigger | = 1.0 | No fix listed |
| jenkins parameterized trigger | = 1.1 | No fix listed |
| jenkins parameterized trigger | = 1.2 | No fix listed |
| jenkins parameterized trigger | = 1.3 | No fix listed |
| jenkins parameterized trigger | = 1.4 | No fix listed |
| jenkins parameterized trigger | = 1.5 | No fix listed |
| jenkins parameterized trigger | = 1.6 | No fix listed |
| jenkins parameterized trigger | = 2.0 | No fix listed |
| jenkins parameterized trigger | = 2.1 | No fix listed |
| jenkins parameterized trigger | = 2.2 | No fix listed |
| jenkins parameterized trigger | = 2.3 | No fix listed |
| jenkins parameterized trigger | = 2.4 | No fix listed |
| jenkins parameterized trigger | = 2.5 | No fix listed |
| jenkins parameterized trigger | = 2.6 | No fix listed |
| jenkins parameterized trigger | = 2.7 | No fix listed |
| jenkins parameterized trigger | = 2.8 | No fix listed |
| jenkins parameterized trigger | = 2.9 | No fix listed |
| jenkins parameterized trigger | = 2.10 | No fix listed |
| jenkins parameterized trigger | = 2.11 | No fix listed |
| jenkins parameterized trigger | = 2.12 | No fix listed |
| jenkins parameterized trigger | = 2.13 | No fix listed |
| jenkins parameterized trigger | = 2.14 | No fix listed |
| jenkins parameterized trigger | = 2.15 | No fix listed |
| jenkins parameterized trigger | = 2.16 | No fix listed |
| jenkins parameterized trigger | = 2.17 | No fix listed |
| jenkins parameterized trigger | = 2.18 | No fix listed |
| jenkins parameterized trigger | = 2.19 | No fix listed |
| jenkins parameterized trigger | = 2.20 | No fix listed |
| jenkins parameterized trigger | = 2.21 | No fix listed |
| jenkins parameterized trigger | = 2.22 | No fix listed |
| jenkins parameterized trigger | = 2.23 | No fix listed |
| jenkins parameterized trigger | = 2.24 | No fix listed |
| jenkins parameterized trigger | = 2.25 | No fix listed |
| jenkins parameterized trigger | = 2.26 | No fix listed |
| jenkins parameterized trigger | = 2.27 | No fix listed |
| jenkins parameterized trigger | = 2.28 | No fix listed |
| jenkins parameterized trigger | = 2.29 | No fix listed |
| jenkins parameterized trigger | = 2.30 | No fix listed |
| jenkins parameterized trigger | = 2.31 | No fix listed |
| jenkins parameterized trigger | = 2.32 | No fix listed |
| jenkins parameterized trigger | = 2.33 | No fix listed |
| jenkins parameterized trigger | = 2.34 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- github.com product
- issues.jenkins.io
- jenkins.io vendor-advisory
- github.com